Virus Scan Failed

Question

Hello, I am seeing a "virus scan failed" error when downloading files on Intune-managed computers. Additionally, I noticed something unusual... Microsoft states that the Attachment Manager setting should be located at:

Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments

I set this value via a policy (value 1) and can see it in the registry, but the computer does not react—as if the setting has no effect. However, I discovered that the same setting also exists under: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments Changing the value there made file downloading work. I also checked with Procmon and saw that Edge actually reads the value from HKLM.

I am using the reference from the following link for this setting, but I have no idea how this setting is being added under HKLM.

My goal is to find out how the ScanWithAntivirus setting is appearing under HKLM. Can anyone help me with this? My environment is Intune-managed.

https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-attachmentmanager?WT.mc_id=Portal-fx#attachmentmanager-notifyantivirusprograms

Answer 1

Up! For post