Forum Discussion
Solved
Antivirus deletes all shortcuts from the desktop
After this morning's update of security intelligence to version 1.381.2140.0, defender is deleting on all clients all links to applications; does anyone have the same problem?
Have the same exact issue but we do not even have the Block Win32 API Calls from Office Macro configured within our ASR rules so very frustrated to be in this position.
To force the point. I have created a new rule and set Block Win32 API Calls from Office Macro to Audit mode.
Hoping this calms things down.
Shayanlarkburywhere are you creating this rule?
- Endpoint Manager > Endpoint Security > Attack Surface Reduction > Create a Policy here.
As in the trailing comments. Hoping once MS resolves this problem, we can switch this policy back to block....- I find it inconceivable that they recommend disabling such an important rule until they fix the problem
