Tamper protection will make sure notifications are enabled.
Reposted from
Nathan McNulty
If you manage Defender AV, please do not disable user UI access. This prevents the user from seeing toast notifications when Defender finds something malicious.
We want users to know when events occur so they have context when we investigate and so they can learn from mistakes :)
We want users to know when events occur so they have context when we investigate and so they can learn from mistakes :)
Comments
Like you can do Defender for Cloud Apps and CA App Control for M365 Apps (E5 needed for all cloud apps), Entra App Proxy for web apps, etc.