Question about ASR Rules and Defender for Endpoint P1

[Nick_Z1]

I am looking for some clarification on the ASR rule configuration and how it plays into the Defender for Endpoint P1 license. I recently bought a P1 license to test ASR rules on endpoints, configured a GP with ASR rules configured to apply to my endpoint, then applied the license to me. Soon after, my developer let me know that he was being blocked from executing a visual basic app. It was one of the rules I set for myself, but I noticed the GP also included another set of users by accident. He did not have a P1 license, nor was his endpoint onboarded in the Windows Security dashboard.Question

Continue reading...