Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Automatic corrections in Windows Def AV (through GPOs) VS AIR (automatic investigation and response)

Copper Contributor

Hello,

Can someone explain me how automatic remediations/upon approval actions work if the GPO "Specify threat alert levels at which default action should not be taken when detected" is active.

 

Does the alerts still display in Action Center if this GPO is active and set ?

What if the GPO is not active but users take actions in windows security center on local machine ?

 

thanks in advance

0 Replies