Skip to content

Commit e4857b9

Browse files
committed
Learn Editor: Update deployment-vdi-microsoft-defender-antivirus.md
1 parent 633dd70 commit e4857b9

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

defender-endpoint/deployment-vdi-microsoft-defender-antivirus.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -55,8 +55,8 @@ In Windows 10, version 1903, Microsoft introduced the shared security intelligen
5555

5656
|Method | Procedure |
5757
|---------|---------|
58-
| Group Policy | 1. On your Group Policy management computer, open the Group Policy Management Console, right-click the Group Policy Object you want to configure, and then select **Edit**.<br/><br/>2. In the Group Policy Management Editor, go to **Computer configuration**.<br/><br/>Select **Administrative templates**.<br/><br/>Expand the tree to **Windows components** \> **Microsoft Defender Antivirus** \> **Security Intelligence Updates**.<br/><br/>3. Double-click **Define security intelligence location for VDI clients**, and then set the option to **Enabled**. A field automatically appears.<br/><br/>4. Enter `\\<sharedlocation\>\wdav-update` (for help with this value, see [Download and unpackage](#download-and-unpackage-the-latest-updates)).<br/><br/>5. Select **OK**.<br/><br/>Deploy the GPO to the VMs you want to test. |
59-
| PowerShell | 1. On each RDS or VDI device, use the following cmdlet to enable the feature: `Set-MpPreference -SharedSignaturesPath \\<shared location>\wdav-update`. <br/><br/>2. Push the update as you normally would push PowerShell-based configuration policies onto your VMs. (See the [Download and unpackage](#download-and-unpackage-the-latest-updates) section the \<shared location\> entry.) |
58+
| Group Policy | 1. On your Group Policy management computer, open the Group Policy Management Console, right-click the Group Policy Object you want to configure, and then select **Edit**.<br/><br/>2. In the Group Policy Management Editor, go to **Computer configuration**.<br/><br/>Select **Administrative templates**.<br/><br/>Expand the tree to **Windows components** > **Microsoft Defender Antivirus** > **Security Intelligence Updates**.<br/><br/>3. Double-click **Define security intelligence location for VDI clients**, and then set the option to **Enabled**. A field automatically appears.<br/><br/>4. Enter `\\<Windows File Server shared location\>\wdav-update` (for help with this value, see [Download and unpackage](#download-and-unpackage-the-latest-updates)).<br/><br/>5. Select **OK**.<br/><br/>Deploy the GPO to the VMs you want to test. |
59+
| PowerShell | 1. On each RDS or VDI device, use the following cmdlet to enable the feature: `Set-MpPreference -SharedSignaturesPath \\<Windows File Server shared location>\wdav-update`. <br/><br/>2. Push the update as you normally would push PowerShell-based configuration policies onto your VMs. (See the [Download and unpackage](#download-and-unpackage-the-latest-updates) section the <shared location> entry.) |
6060

6161
## Download and unpackage the latest updates
6262

@@ -85,23 +85,23 @@ This configuration is possible when the devices have the share and read access (
8585

8686
1. Create an SMB/CIFS file share.
8787

88-
2. Use the following example to create a file share with the following share permissions.
88+
1. Use the following example to create a file share with the following share permissions.
8989

90-
```PowerShell
90+
```PowerShell
9191
PS c:\> Get-SmbShareAccess -Name mdatp$
9292

9393
Name ScopeName AccountName AccessControlType AccessRight
9494
---- --------- ----------- ----------------- -----------
9595
mdatp$ * Everyone Allow Read
9696
```
9797
98-
> [!NOTE]
98+
> [!NOTE]
9999
> An NTFS permission is added for **Authenticated Users:Read:**.
100100
101-
For this example, the file share is:
102-
103-
`\\fileserver.fqdn\mdatp$\wdav-update`
101+
For this example, the file share is:
104102
103+
`\\WindowsFileServer.fqdn\mdatp$\wdav-update`
104+
105105
### Set a scheduled task to run the PowerShell script
106106
107107
1. On the management machine, open the Start menu and type **Task Scheduler**. Open it and select **Create task...** on the side panel.

0 commit comments

Comments
 (0)