Ben Whitmore on Wed, 09 Aug 2017 08:40:29

We recently had a customer who has Windows 10 devices protected with Windows Defender and managed by Intune. The customer had a several machines infected with Malware. Even if it was a zero day payload and definitions were not released Defender still did not clear up the malware infection. It could deal with any executable found and quarantine it but the source of the malware (running as a service) was not dealt with. We had to use Malware bytes to remove the source of infection (reg keys etc).

We are looking at alternative AV as we have lost confidence in Defender. If we decided to try ATP by upgrading our Intune licence to EMS3, does the endpoint get better malware protection or does ATP just offer better insight into your estate using cloud analytic data?


Ben.Paul on Sat, 28 Sep 2019 10:24:19

Are you still with Defender AV or with Defender AV with Defender ATP(EDR) or any other solution?

Just asking out of curiosity.