Windows Defender Exploit Guard should be enabled on your machines Policy not showing compliant

Question

Hi,

This Policy "Windows Defender Exploit Guard should be enabled on your machines" is showing not compliant because the hash value is not correct of the guest configuration. But the standard WindowsDefenderExploitGuard guest configuration is showing compliant in the portal.

The error message from the Policy is that parameterhash target value is not correct. Current value is showing "".

I know that you can create DSC package and store them in storage account and then you need to add a hash when you create the guest configuration but we don't want to spend so much time on that. We only want the Policy to be compliant.

Answer 1

Hi @bengt bengan ,

One potential solution could be to review the compliance data available from within the Configuration Manager console and ensure that the Windows Defender Exploit Guard policy is properly configured and deployed. Additionally, it may be helpful to review the compliance controls for Azure Virtual Machines and Azure Arc-enabled servers outlined in the context to ensure that all necessary security measures are in place.

Related references are:

• Details of the NIST SP 800-53 Rev. 4 Regulatory Compliance built-in initiative
• Create and deploy an Exploit Guard policy
• Azure Policy Regulatory Compliance controls for Azure Virtual Machines
• Azure Policy Regulatory Compliance controls for Azure Arc-enabled servers

This response is partially based on Q&A AI Assist and has been posted here only after manually validating the accuracy of the response.