Defender Exploit Guard Attack Surface Reduction Management

A variety of tools can deploy and manage Exploit Guard ASR on devices running Windows 10. Some tools may work best for a specific task. For example, Autopilot may do an excellent job of deploying or enabling Exploit Guard ASR but is not a tool for monitoring or reporting. Microsoft Defender Advanced Threat Protection (ATP) and System Center Configuration Manager (CM) have the most capabilities and longest support life cycles.

Some tools, such as Microsoft Defender ATP, Intune, or CM, may require additional licensing.

Become a DOM member or log in to read the full report