I had this issue but with only very few users so no changes have been made as of yet. It can be controlled via GPO I believe.
https://msdn.microsoft.com/en-us/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#defender-submitsamplesconsent From: [email protected] [mailto:[email protected]] On Behalf Of Murray, Mike Sent: Friday, January 6, 2017 12:26 PM To: [email protected] Subject: [mssms] Annoying Windows Defender behavior Is there any way to disable this entirely? Users hate it. Thanks! [cid:[email protected]]

