Skip to content

Commit 852bf7a

Browse files
committed
Learn Editor: Update enable-attack-surface-reduction.md
1 parent 49347d6 commit 852bf7a

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

defender-endpoint/enable-attack-surface-reduction.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -287,6 +287,9 @@ Example:
287287
> [!WARNING]
288288
> There is a known issue with the applicability of attack surface reduction on Server OS versions which is marked as compliant without any actual enforcement. Currently, there is no defined release date for when this will be fixed.
289289
290+
> [!NOTE]
291+
> If you're using Disable admin merge with Microsoft Defender for Endpoint Security Settings Management (Disable Local Admin Merge) or Microsoft Intune (Disable Local Admin Merge) or CSP (**[DisableLocalAdminMerge](/windows/client-management/mdm/defender-csp)**) or Group Policy (Configure local administrator merge behavior for lists) to `true` on devices, adding ASR rules per rule exclusions and ASR rules exclusions locally, they will not apply. To modify the behavior, you will need to change it to false.
292+
290293
### Group policy
291294

292295
> [!WARNING]

0 commit comments

Comments
 (0)