![]() ![]() HKLM\Software\Policies\Microsoft\Windows Defender\ScanĬriteria: If the value "DisableRemovableDriveScanning" is REG_DWORD = 0, this is not a finding. Procedure: Use the Windows Registry Editor to navigate to the following key: Verify the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Defender Antivirus -> Scan -> "Scan removable drives" is set to "Enabled". Windows Defender Antivirus Security Technical Implementation Guide Removable drives may still be scanned during quick scan and custom scan. If you disable or do not configure this setting removable drives will not be scanned during a full scan. If you enable this setting removable drives will be scanned during any type of scan. This policy setting allows you to manage whether or not to scan for malicious software and unwanted software in the contents of removable drives such as USB flash drives when running a full scan.
0 Comments
Leave a Reply. |