MC388227: Microsoft Secure Score is adding new improvement actions for Defender for Endpoint and Vulnerability Management

We’re updating Microsoft Secure Score improvement actions to ensure a more accurate representation of security posture.

This update will include these new Microsoft Defender for Endpoint and Microsoft Defender Vulnerability Management recommendations as Microsoft Secure Score improvement actions:

• Disallow offline access to shares
• Remove share write permission set to ‘Everyone’
• Remove shares from the root folder
• Set folder access-based enumeration for shares
• Update Microsoft Defender for Endpoint core components

We will continue to add suggested security improvement actions on an ongoing basis.

When this will happen

This will begin rolling out in mid-June be completed by end of June.

How this will affect your organization

The following improvement actions related to Microsoft Defender for Endpoint and Microsoft Defender Vulnerability Management will be added to Microsoft Secure Score:

• Disallow offline access to shares
• Remove share write permission set to ‘Everyone’
• Remove shares from the root folder
• Set folder access-based enumeration for shares
• Update Microsoft Defender for Endpoint core components

Your score will be updated accordingly.

What you need to do to prepare

There’s no action needed to prepare for this change, your score will be updated accordingly. Microsoft recommends reviewing the improvement actions listed in Microsoft Secure Score.

Message ID: MC388227
Published: 03 June 2022
Updated: 03 June 2022