Microsoft is taking the security of its operating systems and infrastructures very seriously. With the launch of Windows 10, Microsoft made its free antivirus, Windows Defender, available to users, with which to protect themselves from all kinds of threats. In addition, it also has other protection solutions designed for other user groups, such as companies and systems networks, such as Microsoft Defender . The development of both tends to go hand in hand. However, sometimes one of them, as has happened with the second, receives functions like the one Microsoft has just announced that takes user protection to a new level.
Microsoft’s endpoint security suite has two modes of operation. On the one hand, we can configure the “Semi” level, which detects possible threats within the network but requires manual confirmation to eliminate potentially dangerous files. And on the other, a “Full” level that is responsible for eliminating threats as soon as they are automatically detected .
Microsoft telemetry has shown that companies that opt for the “full” level of protection have a higher success rate at correcting and containing threats . For this reason, just a few hours ago, Redmond confirmed a change in the default configuration of the Microsoft Defender for Endpoint suite that will enable this level of protection.
Increased speed when detecting and removing threats with Microsoft Defender
A simple change in the default configuration of the antivirus will allow us to protect much better all the computers connected to the same server that runs Microsoft Defender. If any threat is detected, it will be blocked and completely removed from the network. A copy of the threat will be kept in “quarantine” and a report so that suspicious activity can be investigated.
Microsoft will enable this new level of protection to all users who configure the security suite from scratch. However, those who already have it configured will not see their settings overwritten.
We remember that Microsoft Defender not only protects Windows systems, but also extends to other systems, such as Linux , connected within the same network with the central server.
Will we see it in Windows Defender?
At the moment, Microsoft has only announced this change within the “preview” version. Only administrators targeted within this channel will be able to test this new configuration. This function is scheduled to start on this channel on February 16, 2021 . However, at the moment we do not know when it will be available to all administrators.
On the other hand, Windows Defender, the Windows 10 security suite, is in charge of detecting and blocking all threats by default. However, most of them require manual confirmation from within the Microsoft Security Center. If this feature is successful, Microsoft may bring a similar feature to Windows 10 users. In this way, when malware reaches our computer, the antivirus will detect and eliminate it automatically, without asking. This would reduce the human errors that often end up triggering an infection.