Closed ghost closed 4 years ago
That "hack" is a documented group policy setting. :)
Couterpoints:
Set-MpPreference
results in "Your device may be vulnerable" warning which needs to be manually dismissed, unless you're ok with yellow warning triangles everywhere.Set-MpPreference
still needs to be run as administrator and applies system-wide, so your first point is not valid.Set-MpPreference
, not just on/off (e.g. the registry value for SubmitSamplesConsent is 2, implying there are at least 3 different states), so your second point is not valid either.EnableCtrldFolderAccess
uses Set-MpPreference
only because there was no GPO for this setting at the time (i.e. in 1709, there may be some now, I need to check)That "hack" is a documented group policy setting. :)
I didn't know, my lack :)
All counterpoints are clear and winning, definitely. Thanks for sharing the reasons.
The functions DisableDefenderCloud and EnableDefenderCloud use a registry hack approach for to perform its goals.
It is possible to use these PowerShell command
Set-MpPreference -MAPSReporting …
andSet-MpPreference -SubmitSamplesConsent ...
for to obtain same results.Advantages: