Defender for Endpoint App Execution De-Restriction Action

This guide will show an administrator how to alleviate a device App Execution Restriction process that was initiated on a MDE enrolled Device.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

Defender for Endpoint Device App Execution De-Restriction

  1. Navigate to the Device Inventory – Microsoft Defender portal, locate and select the device you wish to remove the app execution restriction from.
  2. A pop-out will generate displaying device information for the entry, locate and select the three dots, followed by selecting the Remove App Restriction action.
  3. A prompt will be generated asking for finalization on the removal action, select Confirm to complete removal of the device app execution restriction.

Need Assistance?

Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.