Deploy Attack Surface Reduction Rules from Microsoft Intune

[@sunildahiya6363]

Thanks for such a well explained deployment of ASR Rules.

[@jmemusic]

Where is the link to the second video talking about the exclusions? It is not on the description and the recommended video only talks about Log Analytics

[@krishdayananda4662]

Great video, what is recommendation around enabling all 16 rules should we use one ASR rule or separate rule for each configuration to have more control over exceptions. Thanks

[@ConceptsWork]

I would suggest to start with machines from different business units, enable all the rules in audit mode. Check ASR reports section to get the dump of all the files getting impacted, add valid exclusions first and then enabled rules in block mode.

[@krishdayananda4662]

@@ConceptsWork Thanks, I was wondering, if I start the audit mode and identify that I need to enable exclusions for a selected number of computers for Adobe child processes and another selected number of computers for Office macros, how should we apply these settings? Should we have two separate ASR policy profiles in Intune?

[@janeshaabeygunawardana1280]

Great video! Thank you so much!

[@n.vasiliu]

Hi. You mentioned the link to the Office document that creates child processes. Do you mind sharing it? Thanks.

[@machine5464]

Very well explained.

[@ConceptsWork]

Glad it was helpful!

[@MichaelKeller-u1d]

Are these the best practise deployments?