Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Microsoft Defender Antivirus Security Technical Implementation Guide
SRG-APP-000209
Microsoft Defender AV must be configured to not allow override of scanning for downloaded files and attachments.
Microsoft Defender AV must be configured to not allow override of scanning for downloaded files and attachments.
An XCCDF Rule
Details
Profiles
Prose
Microsoft Defender AV must be configured to not allow override of scanning for downloaded files and attachments.
Medium Severity
<VulnDiscussion>This policy setting configures a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Group Policy. If this setting is enabled, the local preference setting will take priority over Group Policy. If this setting is disabled or not configured, Group Policy will take priority over the local preference setting.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>