Restrict moving from Quarantine on Windows Defender

Vasilije Djurovic 66 Reputation points
2021-11-22T12:49:47.13+00:00

Hello,

I want to restrict users in our organisation from removing quarantine items back to PC. I want to they see that items but that they can't remove it from quarantine.

Is there a way to restrict this option in "Protection History" tab or with some Group Policy or Security center?

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
3,002 questions
0 comments No comments
{count} votes

Accepted answer
  1. Limitless Technology 39,796 Reputation points
    2021-11-23T09:55:47.377+00:00

    Hi there,

    I suppose you cannot prevent the files from restoring , instead you can restrict Assign user access to Microsoft Defender Security Center.

    Defender for Endpoint supports two ways to manage permissions:

    Basic permissions management: Set permissions to either full access or read-only.
    Role-based access control (RBAC): Set granular permissions by defining roles, assigning Azure AD user groups to the roles, and granting the user groups access to device groups.

    Assign user access to Microsoft Defender Security Center
    https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/assign-portal-access?view=o365-worldwide

    Manage portal access using role-based access control
    https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/rbac?view=o365-worldwide

    -----------------------------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept it as an answer--

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.