MT.1155 - Full Scan Mapped Drives should be disabled for performance

Contributed by Boris DrogjaAll contributors →

Overview

Verify that full scan of mapped network drives is disabled for performance.

Full scan on mapped drives can cause significant performance issues.

Remediation action:

1. Open Microsoft Endpoint Manager > Endpoint Security > Antivirus
2. Edit the relevant Microsoft Defender Antivirus policy
3. Disable Allow Full Scan on Mapped Network Drives

Related links

• Configure Microsoft Defender Antivirus
• Microsoft Endpoint Manager

Test Metadata

Field	Value
Test ID	MT.1155
Severity	High
Suite	Maester
Category	Defender
PowerShell test	Test-MtMdeMappedDriveScanning
Tags	Defender, Maester, MT.1155

Source

• Pester test: tests/Maester/Defender/Test-MtMdeAntivirusPolicy.Tests.ps1
• PowerShell source: powershell/public/maester/defender/Test-MtMdeMappedDriveScanning.ps1