Endpoint security settings (EDR, ASR etc.) applied to computer without group membership

Question

Hello,we have an Azure AD group with a dynamic group membership. The filter were modified and because of this all except one computer were removed from the group. After that the group was linked to endpoint security policies.&nbsp;Now we can see two computer, which were in the group and are now no longer member of the group, getting configuration settings for Defender ATP.&nbsp;Does anyone know this problem?

matthias_hei · Answer

ChristianFrielingsdorf, I think the new EDR policies automatically onboard machines to Defender ATP, if it is set up. I saw that when I was testing it.

christianfrielingsdorf · Answer

Hej Matthias,I have created a new group and linked it to the EDR-Policy. With this group the situation is as expected.

Forum Discussion

Endpoint security settings (EDR, ASR etc.) applied to computer without group membership

Share

Resources