Defender E-Mail Scan GPO

Wolfgang Metzner GmbH & Co. KG 21 Reputation points
2021-01-21T13:11:01.85+00:00

When I activate email scanning via the domain GPO, the following is displayed on the Windows 10 Enterprise computer:
Command prompt: gpresult -> DisableEmailScanning: activated.
In the Powershell with the command: get-mppreference I get: -> DisableEmailScanning: True
This is all completely contradicting itself.
How can I ensure that the setting from the GPO is correctly received by the Windows 10 clients?

I use the latest admx Files for the Domain. The Domain is on 2016.

Please help.

But only if you really know, I can google myself.

Thanks an greetings from Germany / Berlin.

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,747 questions
0 comments
Accepted answer
  1. Hannah Xiong 6,231 Reputation points
    2021-01-22T02:48:17.193+00:00

    Hello,

    Thank you so much for posting here.

    According to our description, we configured the GPO for enable email scanning but the policy was not applied.

    I did the test in my lab. I configured the group policy as shown below.

    1, Create the OU and add the computer accounts into this OU.

    59432-1.png

    2, Open Group Policy Management, and create a GPO and link it to the above OU.

    59451-2.png

    3, Configure the policy to enable email scan as shown below.

    59452-3.png

    Then log on to the computer and open the CMD as administrator and run the following command to check the gpresult report. We could see that the policy is applied.

    gpresult /h C:\report.html

    59365-5.png

    Then run the command get-mppreference, we could get DisableEmailScanning: False.

    59379-4.png

    We could kindly have a recheck of the configuration of the policy and then run the gpresult /h to get the gpresult report to check whether it is applied or not.

    For any question, please feel free to contact us.

    Best regards,
    Hannah Xiong

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Wolfgang Metzner GmbH & Co. KG 21 Reputation points
    2021-01-25T12:21:38.42+00:00

    Hi, thank you for the support.

    The last thing is that we get:

    get-mppreference: DisableEmailScanning: true

    And i dont understand why and whats happend here.

    Greetings from Berlin

    Tobias Klumpp