Can you set it up to enable automatic sample file submission in your environment? That setting is in Assets and Compliance – Endpoint Protection – Antimalware Policies, find your workstation policy. It’s under advanced, near the bottom named “Enable auto sample file submission to help, blah…” Changing the policy to Yes would get rid of the prompts as they’ll go automatically. That’s what I did anyway.
John From: [email protected] [mailto:[email protected]] On Behalf Of Murray, Mike Sent: Friday, January 6, 2017 4:46 PM To: [email protected] Subject: RE: [mssms] RE: Annoying Windows Defender behavior We’re using MS Endpoint Protection as our AV, so this is not an option. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Adam Juelich Sent: Friday, January 6, 2017 2:27 PM To: [email protected]<mailto:[email protected]> Subject: Re: [mssms] RE: Annoying Windows Defender behavior If you have a different AV on your machines then just disable Windows Defender via GPO. If you are using SCEP on Windows 8 or newer (Maybe just 10?), I don't think you want to disable it as SCEP basically just leverages Windows Defender and flips on the management switch. On Fri, Jan 6, 2017 at 3:34 PM, Jason Mlynarchuk <[email protected]<mailto:[email protected]>> wrote: I had this issue but with only very few users so no changes have been made as of yet. It can be controlled via GPO I believe. https://msdn.microsoft.com/en-us/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider#defender-submitsamplesconsent From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Murray, Mike Sent: Friday, January 6, 2017 12:26 PM To: [email protected]<mailto:[email protected]> Subject: [mssms] Annoying Windows Defender behavior Is there any way to disable this entirely? Users hate it. Thanks! [cid:[email protected]] ________________________________ CONFIDENTIALITY NOTICE: This email message and any attachments hereto are intended only for use by the addressee(s) named herein and may contain information which is legally privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, or an authorized representative of the intended recipient, of this email message, you are hereby notified that any review, dissemination, distribution, copying, or use (including any reliance thereon) of this email message, and/or any attachment hereto, is strictly prohibited. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is free from virus or other defect and no responsibility is accepted by the sending company, its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you have received this email message in error, please immediately notify the sender by return email and permanently delete from your system, the original and any copies of this email and any attachments hereto and any printout hereof. Unauthorized interception of this email is a violation of federal criminal law.

