ACMP Defender Management

ACMP Defender Management displays the Defender status, scan histories, the latest threats and information on the next upcoming scan and offers the option of querying the used / unused configuration profiles and much more.

Tamper protection prevents various settings from being set so that malicious apps cannot change important Microsoft Defender antivirus settings. Tamper protection cannot be deactivated automatically.

Administrators can configure the user rights for configuration profiles, containers and query actions. The authorisations for groups and their users can also be adjusted.

Regular scans are carried out for detections, threats and updates. Notifications about detections are sent in real time. There is also an overview of all threats found, failed updates and other events. The display of events can be configured. There is also the option of filtering, sorting and deleting outdated events. You can navigate directly from an event to the affected client.

Viewing and restoring quarantine files and performing actions on them is easily possible centrally from the ACMP console. Quarantine files can be automatically deleted after a defined period of time.

You can start the antivirus scan on a client and display the status of the scan in the logs. It is also possible to assign scheduled scans to a client via a configuration profile or to remove them.

Microsoft does not offer companies with critical infrastructures that are not directly connected to the Internet for security reasons the option of managing Microsoft Defender without a cloud connection. The use of ACMP Defender Management solves this problem, as ACMP can be used simply and easily directly "on premises". This means that even in such environments, there is no reason not to use Microsoft Defender on the end devices.

You can already use most of the Defender functions from Windows 10 Pro. Depending on the size of your contract with Microsoft, additional enterprise functions are added with E3 or E5 or Education A5. Microsoft has summarised the exact range of Microsoft Defender functions, depending on the licensing, here .

The data is stored centrally and only in the ACMP database.

The module is licensed on a client basis as a rental licence.

Yes, only ACMP Inventory is required.

These can be restored or automatically deleted using the clean-up service. Exceptions can also be defined for quarantined files.

This is implemented with the help of reports. As soon as a notification of a find is received, a report can be sent automatically.

Times can be defined for quick, full and custom scans.

Yes, profiles can be assigned dynamically via the containers.