

With this level of semi-automation, approval is required for remediation actions on all files. If necessary, a remediation action can be undone.įull automation is recommended and is selected by default for tenants with Defender for Endpoint that were created on or after August 16, 2020, with no device groups defined yet.įull automation is set by default in Defender for Business. All remediation actions that are taken can be viewed in the Action Center on the History tab. With full automation, remediation actions are performed automatically on entities that are considered to be malicious. Device group creation is supported in Defender for Endpoint Plan 1 and Plan 2.
