Microsoft Secure Score is adding new improvement actions for Defender for Endpoint and Vulnerability Management

Originally posted by Microsoft Jun 17, 2022 Microsoft 365 Apps 0 Comments

We’re updating Microsoft Secure Score improvement actions to ensure a more accurate representation of security posture.

This update will include these new Microsoft Defender for Endpoint and Microsoft Defender Vulnerability Management recommendations as Microsoft Secure Score improvement actions:

• Disallow offline access to shares
• Remove share write permission set to ‘Everyone’
• Remove shares from the root folder
• Set folder access-based enumeration for shares
• Update Microsoft Defender for Endpoint core components

 We will continue to add suggested security improvement actions on an ongoing basis.

When this will happen:

This will begin rolling out in mid-June be completed by end of June.

How this will affect your organization:

The following improvement actions related to Microsoft Defender for Endpoint and Microsoft Defender Vulnerability Management will be added to Microsoft Secure Score:

1. Disallow offline access to shares
2. Remove share write permission set to ‘Everyone’
3. Remove shares from the root folder
4. Set folder access-based enumeration for shares
5. Update Microsoft Defender for Endpoint core components

Your score will be updated accordingly.

What you need to do to prepare:

There’s no action needed to prepare for this change, your score will be updated accordingly. Microsoft recommends reviewing the improvement actions listed in Microsoft Secure Score.

Message ID: MC388227