Display additional text to clients when they need to perform an action

SCarver 21 Reputation points
2021-06-30T17:18:25.127+00:00

We are using windows defender and I am trying to set a custom Notification message for the client when encountering a virus. We have set the following GPO setting: “Display additional text to clients when they need to perform an action”. We have also set registry policy manually.

We test the notification policy by introducing a non-malignant virus to the system. Every time we introduce the virus, Defender cleans the virus but does not bring the custom notification.

We have enable “Enhanced Notifications” for Defender and “Security and Maintenance” notifications. I still do not get the custom notification.

Is this GPO setting suppose to come up when the virus is encountered? Any assistance will be appreciated.

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,744 questions
{count} votes

Accepted answer
  1. Teemo Tang 11,326 Reputation points
    2021-07-01T02:10:03.32+00:00

    Let’s check the explanation of the policy: Display additional text to clients when they need to perform an action.
    This policy setting allows you to configure whether or not to display additional text to clients when they need to perform an action. The text displayed is a custom administrator-defined string.
    Only when users need to perform an action then the addition text will display, if the virus has been removed by Defender automatically without user action, the customized notification should not be displayed.
    Maybe your non-malignant virus cannot act as a real virus which can make Defender provides a prompt for users to perform an action then trigger the additional text notification.
    Besides, this GPO seems only works on Windows Enterprise edition.
    110799-image.png

    In fact, your current notification configurations are correct, we don’t need to do additional settings, when clients occurred a real virus and defender detects it, it will prompts a notification.
    More information here:
    https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/use-group-policy-microsoft-defender-antivirus?view=o365-worldwide

    -------------------------------------------------------------------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

0 additional answers

Sort by: Most helpful