How do I remove or restore items quarantined by Endpoint Protection?
Updated: April 1, 2012
Applies To: System Center 2012 Configuration Manager, System Center 2012 R2 Configuration Manager, System Center 2012 Endpoint Protection SP1, System Center 2012 Configuration Manager SP1, System Center 2012 Endpoint Protection, Windows Intune, Forefront Endpoint Protection, System Center 2012 R2 Endpoint Protection
When Endpoint Protection quarantines software, it moves the software to another location on your computer, and then it prevents the software from running until you choose to restore it or to remove it from your computer.
For all the steps mentioned in this procedure, if you're prompted for an administrator password or confirmation, type the password or provide confirmation.
To remove or restore quarantined items
Click the History tab, and then select the Quarantined items option.
In Windows Vista or Windows 7, click View details to see all of the items.
In Windows XP, you'll need to log on as an administrator on the computer to see of the all items.
Review each item, and then for each, click Remove or Restore. If you want to remove of the all quarantined items from your computer, click Remove All.
Do not restore software with severe or high alert ratings, because it can put your privacy and the security of your computer at risk.