none
Attack Surface Reduction can't be configured via Powershell RRS feed

  • Question

  • Hi All,

    on one of my Windows 10 (Version 1709) machines, I can't configure the Attack Surface Reduction (ASR) settings using the Powershell  Add-MpPreference/Set-MpPreference commands.

    PS C:\WINDOWS\system32> Add-MpPreference -AttackSurfaceReductionRules_Ids D4F940AB-401B-4EFC-AADC-AD5F3C50688A -AttackSu
    rfaceReductionRules_Actions Enabled
    Add-MpPreference : Die Eigenschaft ist ungültig.
    In Zeile:1 Zeichen:1
    + Add-MpPreference -AttackSurfaceReductionRules_Ids D4F940AB-401B-4EFC- ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : MetadataError: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Add-MpPreference],
        CimException
        + FullyQualifiedErrorId : HRESULT 0x80041031,Add-MpPreference

    Windows Version is 10 Pro, 1709 (16299.248).

    Powershell version is:

    PS C:\WINDOWS\system32>  $PSVersionTable.PSVersionMajor

      Minor  Build  Revision

    -----  -----  -----  --------

    5      1      16299  248

    Windows Defender is up and running:

    PS C:\WINDOWS\system32> Get-MpComputerStatus
    
    
    AMEngineVersion                 : 1.1.14500.5
    AMProductVersion                : 4.12.17007.18011
    AMServiceEnabled                : True
    AMServiceVersion                : 4.12.17007.18011
    AntispywareEnabled              : True
    AntispywareSignatureAge         : 0
    AntispywareSignatureLastUpdated : 2/19/2018 5:55:08 PM
    AntispywareSignatureVersion     : 1.261.1366.0
    AntivirusEnabled                : True
    AntivirusSignatureAge           : 0
    AntivirusSignatureLastUpdated   : 2/19/2018 5:55:14 PM
    AntivirusSignatureVersion       : 1.261.1366.0
    BehaviorMonitorEnabled          : True
    ComputerID                      : 61CC929F-8816-47B1-9CC3-EBE04DD89253
    ComputerState                   : 0
    FullScanAge                     : 4294967295
    FullScanEndTime                 :
    FullScanStartTime               :
    IoavProtectionEnabled           : True
    LastFullScanSource              : 0
    LastQuickScanSource             : 1
    NISEnabled                      : True
    NISEngineVersion                : 2.1.14202.0
    NISSignatureAge                 : 0
    NISSignatureLastUpdated         : 2/19/2018 8:06:35 PM
    NISSignatureVersion             : 118.2.0.0
    OnAccessProtectionEnabled       : True
    QuickScanAge                    : 0
    QuickScanEndTime                : 2/19/2018 7:36:39 PM
    QuickScanStartTime              : 2/19/2018 7:35:29 PM
    RealTimeProtectionEnabled       : True
    RealTimeScanDirection           : 0
    PSComputerName                  :

    Has anybody experienced the same problem?

    Kind Regards,

    Florian


    Monday, February 19, 2018 8:29 PM

All replies