Question about "Windows Security Center"

Hello,

Environment:

Windows10/11 devices - zenworks with antimalware installed or not - doesn't matter.

Problem:

out-of-the-box we get 2 warnings in windows security center (small yellow exclamation mark in tasktray)
1. App and browser protection not activated
2. Device security not activated

Question:

What is best practise these days when third-party-antimalware like ZAM is active on that machines?

  • enable all security features in windows security - centralized via bundle (regedit) or gpo?
  • hide windows security center so that no warnings are visible?

Thanks for suggestions!

  • 0  

    This really has nothing to do with ZENworks Anti-Malware.

    Configure the settings as you prefer via a GPO.

    GPEDIT.MSC->Computer Configuration->Administrative Templates->Windows Compontents->WIndows Security

    These and other settings can be found there.

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

  • 0 in reply to   

    Thanks Craig, not a functionality of ZENworks Anti-Malware but in conjunction with that a topic on every windows 10/11 device.

    Lets talking little bit over the fence here for more security or better functionality on our windows workstations maybe.
    What's the registry setting / GPO in your environment?

  • Suggested Answer

    0

    I've disabled Windows Security Center via GPO
    Computer Configuration > Administrative Templates > Windows Components > Windows Security > Systray

    These new windows "defender" security features depending on hardware/bios settings in conjunction with tpm and secureboot. So not recommended to enable it plaine. In addition to that have had internal cybersecurity pentest this year where these windows security center settings "currently" weren't a topic. On the other hand there is third-party-Antivirus on all machines, where to find settings e.g. for additional App- and Browsersecurity ;)