You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md
+11-13Lines changed: 11 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -82,7 +82,7 @@ Although potentially unwanted application protection in Microsoft Edge (Chromium
82
82
3. Under the **Security** section, turn on **Block potentially unwanted apps**.
83
83
84
84
> [!TIP]
85
-
> If you are running Microsoft Edge (Chromium-based), you can safely explore the URL-blocking feature of PUA protection by testing it out on one of our [Microsoft Defender SmartScreen demo pages](https://demo.smartscreen.msft.net/).
85
+
> If you're running Microsoft Edge (Chromium-based), you can safely explore the URL-blocking feature of PUA protection by testing it out on one of our [Microsoft Defender SmartScreen demo pages](https://demo.smartscreen.msft.net/).
86
86
87
87
### Block URLs with Microsoft Defender SmartScreen
88
88
@@ -96,7 +96,7 @@ Although Microsoft Defender for Endpoint has its own blocklist based upon a data
96
96
97
97
The potentially unwanted application (PUA) protection feature in Microsoft Defender Antivirus can detect and block PUA on endpoints in your network.
98
98
99
-
Microsoft Defender Antivirus blocks detected PUA files and any attempts to download, move, run, or install them. Blocked PUA files are then moved to quarantine. When a PUA file is detected on an endpoint, Microsoft Defender Antivirus sends a notification to the user ([unless notifications have been disabled](configure-notifications-microsoft-defender-antivirus.md) in the same format as other threat detections. The notification is prefaced with `PUA:` to indicate its content.
99
+
Microsoft Defender Antivirus blocks detected PUA files and any attempts to download, move, run, or install them. Blocked PUA files are then moved to quarantine. When a PUA file is detected on an endpoint, Microsoft Defender Antivirus sends a notification to the user ([unless notifications are disabled](configure-notifications-microsoft-defender-antivirus.md) in the same format as other threat detections. The notification is prefaced with `PUA:` to indicate its content.
100
100
101
101
The notification appears in the usual [quarantine list within the Windows Security app](microsoft-defender-security-center-antivirus.md).
102
102
@@ -123,7 +123,7 @@ See the following articles:
123
123
124
124
PUA protection is enabled by default in the Microsoft Configuration Manager (Current Branch).
125
125
126
-
See [How to create and deploy antimalware policies: Scheduled scans settings](/configmgr/protect/deploy-use/endpoint-antimalware-policies#real-time-protection-settings) for details on configuring Microsoft Configuration Manager (Current Branch).
126
+
See [How to create and deploy anti-malware policies: Scheduled scans settings](/configmgr/protect/deploy-use/endpoint-antimalware-policies#real-time-protection-settings) for details on configuring Microsoft Configuration Manager (Current Branch).
127
127
128
128
For System Center 2012 Configuration Manager, see [How to Deploy Potentially Unwanted Application Protection Policy for Endpoint Protection in Configuration Manager](/previous-versions/system-center/system-center-2012-R2/hh508770(v=technet.10)#BKMK_PUA).
129
129
@@ -156,7 +156,7 @@ For System Center 2012 Configuration Manager, see [How to Deploy Potentially Unw
156
156
Set-MpPreference -PUAProtection Enabled
157
157
```
158
158
159
-
Setting the value for this cmdlet to `Enabled` turns on the feature if it has been disabled.
159
+
Setting the value for this cmdlet to `Enabled` turns on the feature if it is disabled.
160
160
161
161
#### To set PUA protection to audit mode
162
162
@@ -185,9 +185,9 @@ get-mpPreference | ft PUAProtection
185
185
186
186
|Value | Description|
187
187
| -------- | -------- |
188
-
|0| PUA Protection off (Default). Microsoft Defender Antivirus won't protect against potentially unwanted applications. |
189
-
|1 |PUA Protection on. Detected items are blocked. They will show in history along with other threats.|
190
-
|2|Audit mode. Microsoft Defender Antivirus will detect potentially unwanted applications but take no action. You can review information about the applications Windows Defender would've taken action against by searching for events created by Windows Defender in the Event Viewer.|
188
+
|`0`| PUA Protection off (Default). Microsoft Defender Antivirus won't protect against potentially unwanted applications. |
189
+
|`1`|PUA Protection on. Detected items are blocked. They will show in history along with other threats.|
190
+
|`2`|Audit mode. Microsoft Defender Antivirus will detect potentially unwanted applications but take no action. You can review information about the applications Windows Defender would've taken action against by searching for events created by Windows Defender in the Event Viewer.|
191
191
192
192
For more information, see [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender Antivirus cmdlets](/powershell/module/defender/index).
193
193
@@ -238,16 +238,14 @@ Sometimes a file is erroneously blocked by PUA protection, or a feature of a PUA
238
238
239
239
For more information, see [Configure and validate exclusions based on file extension and folder location](configure-extension-file-exclusions-microsoft-defender-antivirus.md).
240
240
241
-
> [!TIP]
242
-
> If you're looking for Antivirus related information for other platforms, see:
243
-
> -[Microsoft Defender for Endpoint on Mac](microsoft-defender-endpoint-mac.md)
244
-
> -[Microsoft Defender for Endpoint on Linux](microsoft-defender-endpoint-linux.md)
245
-
> -[Configure Defender for Endpoint on Android features](android-configure.md)
246
-
> -[Configure Microsoft Defender for Endpoint on iOS features](ios-configure-features.md)
0 commit comments