App and browser isolationĬSP: AllowWindowsDefenderApplicationGuard When viewing a settings information text, you can use its Learn more link to open that content. That content can provide more information about the use of the setting in its proper context. Instead, the name of each setting, its configuration options, and its explanatory text you see in the Microsoft Intune admin center are taken directly from the settings authoritative content. Although you can no longer create new instances of the older profile, you can continue to edit and use instances of it that you previously created.įor profiles that use the new settings format, Intune no longer maintains a list of each setting by name. With this change you can no longer create new versions of the old profile and they are no longer being developed. Profiles created after that date use a new settings format as found in the Settings Catalog. This section details the settings in App and browser isolation profiles created before April 18, 2023. Profile: Attack Surface Reduction RulesĪttack surface reduction (MDM) App and browser isolation profile.Windows 10, Windows 11, and Windows Server: Use this platform for policy you deploy to devices managed through Security Management for Microsoft Defender for Endpoint. Profile: Web Protection (ConfigMgr)(preview).

Profile: Exploit Protection(ConfigMgr)(preview).

Windows 10 and later (ConfigMgr): Use this platform for policy you deploy to devices managed by Configuration Manager.

Profile: Web protection (Microsoft Edge Legacy).

Profile: Attack surface reduction rules.

Windows 10 and later - Use this platform for policy you deploy to devices managed with Intune. View the settings you can configure in profiles for Attack surface reduction policy in the endpoint security node of Intune as part of an Endpoint security policy.

Controlled folder access intune