Merge pull request #3448 from MicrosoftDocs/main

Publish main to live, 04/09/25, 10:30 AM PDT

Author: garycentric

defender-endpoint/use-group-policy-microsoft-defender-antivirus.md

@@ -6,8 +6,8 @@ ms.localizationpriority: medium
 author: emmwalshh
 ms.author: ewalsh
 ms.custom: nextgen
-ms.date: 03/12/2025
-ms.reviewer: ksarens, jtoole, pahuijbr
+ms.date: 04/10/2025
+ms.reviewer: ksarens, jtoole, pahuijbr, yongrhee
 manager: deniseb
 ms.subservice: ngp
 audience: ITPro
@@ -32,6 +32,7 @@ search.appverid: met150
 
 **Platforms**
 - Windows
+- Windows Server
 
 We recommend using [Microsoft Intune](/mem/intune/fundamentals/what-is-intune) to manage Microsoft Defender Antivirus settings for your organization. However, you can use [Group Policy](/windows/win32/srvnodes/group-policy) to configure and manage some settings for Microsoft Defender Antivirus.
 
@@ -59,12 +60,11 @@ In general, you can use the following procedure to configure or change some sett
 
 ## Group Policy settings and resources
 
-The following table lists commonly used Group Policy settings that are available in Windows 10.
+The following table lists commonly used Group Policy settings that are available in Windows 10 and later, Windows Server 2016 and later, including if you are running Windows Server 2012 R2 with the unified Microsoft Defender for Endpoint client.
 
 > [!TIP]
 > For the most current settings, get the latest ADMX files in your central store to access the correct policy options. See [How to create and manage the Central Store for Group Policy Administrative Templates in Windows](/troubleshoot/windows-client/group-policy/create-and-manage-central-store) and download the latest files. 
 
-
 | Location | Setting | Article |
 |---|---|---|
 | Client interface| Enable headless UI mode | [Prevent users from seeing or interacting with the Microsoft Defender Antivirus user interface](prevent-end-user-interaction-microsoft-defender-antivirus.md) |
@@ -193,21 +193,7 @@ The following table lists commonly used Group Policy settings that are available
 > Instead of using "Run full scan on mapped network drives", if you have a Network-Attached Storage (NAS) or Storage Area Network (SAN), you can use Internet Content Adaption Protocol (ICAP) scanning with the Microsoft Defender Antivirus engine. For more information, see **[Tech Community Blog: MetaDefender ICAP with Windows Defender Antivirus: World-class security for hybrid environments](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/metadefender-icap-with-windows-defender-antivirus-world-class/ba-p/800234)**.
 
 > [!TIP]
-> **Performance tip** Due to a variety of factors (examples listed below) Microsoft Defender Antivirus, like other antivirus software, can cause performance issues on endpoint devices. In some cases, you might need to tune the performance of Microsoft Defender Antivirus to alleviate those performance issues. Microsoft's **Performance analyzer** is a PowerShell command-line tool that helps determine which files, file paths, processes, and file extensions might be causing performance issues; some examples are:
->
-> - Top paths that impact scan time
-> - Top files that impact scan time
-> - Top processes that impact scan time
-> - Top file extensions that impact scan time
-> - Combinations – for example:
->   - top files per extension
->   - top paths per extension
->   - top processes per path
->   - top scans per file
->   - top scans per file per process
->
-> You can use the information gathered using Performance analyzer to better assess performance issues and apply remediation actions. 
-> See: [Performance analyzer for Microsoft Defender Antivirus](tune-performance-defender-antivirus.md).
+> **Performance tip** Due to a variety of factors, Microsoft Defender Antivirus, like other antivirus software, can cause performance issues on endpoint devices. In some cases, you might need to tune the performance of Microsoft Defender Antivirus to alleviate those performance issues. Microsoft's **Performance analyzer** is a PowerShell command-line tool that helps determine which files, file paths, processes, and file extensions might be causing performance issues. You can use the information gathered using Performance analyzer to better assess performance issues and apply remediation actions. For more information, see: [Performance analyzer for Microsoft Defender Antivirus](tune-performance-defender-antivirus.md).
 
 ## See also
 

defender-vulnerability-management/fixed-reported-inaccuracies.md

@@ -7,13 +7,14 @@ ms.pagetype: security
 ms.author: deniseb
 author: denisebmsft
 manager: deniseb
+ms.reviewer: v-hbijlani; mobani
 audience: ITPro
 ms.collection: 
 - m365-security
 - tier2
 ms.localizationpriority: medium
 ms.topic: troubleshooting
-ms.date: 03/21/2025
+ms.date: 04/10/2025
 ---
 
 # Vulnerability support in Microsoft Defender Vulnerability Management
@@ -29,8 +30,8 @@ This article provides information on inaccuracies that have been reported. You c
 
 > [!NOTE]
 > The tables may also include updates based on vulnerability support queries from ICMs or in response to customer requests.
-
-The following tables present the relevant vulnerability information organized by month:
+ 
+The following tables present the relevant vulnerability information organized by month.
 
 ## March 2025
 
@@ -44,6 +45,10 @@ The following tables present the relevant vulnerability information organized by
 | 90044 | Fixed inaccuracy in OpenVPN Connect vulnerability- CVE-2024-8474 | 11-Mar-25 |
 | - | Added Microsoft Defender Vulnerability Management support for Reload4j | 11-Mar-25 |
 | - | Fixed bad normalization in multiple products and vendors | 19-Mar-25 |
+| 84587 | Fixed vulnerability detection in Glance | 23-Mar-25 |
+| 94464 | Fixed inaccuracy in CVE-2025-22480 by removing SupportAssist CPEs | 24-Mar-25 |
+| - | Defender Vulnerability Management doesn't currently support CVE-2017-5703 | 25-Mar-25 |
+| 91175 | Fixed inaccuracy in CVE-2022-33633 by removing Skype CPEs | 25-Mar-25 |
 
 
 ## February 2025