Hi everyone,

I am trying to find a way to disable our users ability to release files from quarantine in ‘protection history’. For example, if a user downloads a malware or creates an EICAR file, it gets quarantined by Defender. From here, the user has the ability to release the file from ‘Protection History’.

I am trying to remove this ability.

My idea was to remove the whole page through GPO, or maybe find a registry key that enables/disables this view but havent found anything.

We already hide the virus threat protection UI. However, the protection history is still accessible to users.

​Hi everyone, I am trying to find a way to disable our users ability to release files from quarantine in ‘protection history’. For example, if a user downloads a malware or creates an EICAR file, it gets quarantined by Defender. From here, the user has the ability to release the file from ‘Protection History’. I am trying to remove this ability. My idea was to remove the whole page through GPO, or maybe find a registry key that enables/disables this view but havent found anything. We already hide the virus threat protection UI. However, the protection history is still accessible to users.  Read More

​