Forum Discussion

PLivingston11's avatar
PLivingston11
Copper Contributor
Sep 17, 2023

ASR Rule issue

Hi,   We have enabled ASR rules using SCCM but 'block credential stealing from the windows local security authority subsystem (lsass.exe)' shows as not applicable. Any ideas why?       Th...
microsoft defender for endpoint
BillClarksonAntill's avatar
BillClarksonAntill
Iron Contributor
Sep 18, 2023
What version of Windows are you using, not all versions of windows OS are compatible
  • PLivingston11's avatar
    PLivingston11
    Copper Contributor
    Sep 18, 2023
    Hi Bill,

    We are using 22h2, fully patched.

Resources