Windows Security Notifications
|
NOTIFICATIONS |
||
|
Purpose |
Notification Text |
Toast Identifier |
|
Network isolation |
Your IT administrator has caused Windows Defender to
disconnect your device. Contact IT help desk. |
SENSE_ISOLATION |
|
Network
isolation customized |
Company
name has caused Windows Defender to disconnect your device. Contact IT help
desk phone number, email address, url. |
SENSE_ISOLATION_CUSTOM
(body) |
|
Restricted access |
Your IT administrator has caused Windows Defender to
limit actions on this device. Some apps may not function as expected. Contact
IT help desk. |
SENSE_PROCESS_RESTRICTION |
|
Restricted
access customized |
Company
has caused Windows Defender to limit actions on this device. Some apps may
not function as expected. Contact IT help desk. |
SENSE_PROCESS_RESTRICTION _CUSTOM
(body) |
|
HVCI, driver compat
check fails (upon trying to enable) |
There may be an incompatibility on your device. |
HVCI_ENABLE_FAILURE |
|
HVCI,
reboot needed to enable |
The
recent change to your protection settings requires a restart of your device. |
HVCI_ENABLE_SUCCESS |
|
Item skipped in scan, due to exclusion
setting, or network scanning disabled by admin |
The Microsoft Defender Antivirus scan skipped an item
due to exclusion or network scanning settings. |
ITEM_SKIPPED |
|
Remediation
failure |
Microsoft
Defender Antivirus couldn’t completely resolve potential threats. |
CLEAN_FAILED |
|
Follow-up action (restart & scan) |
Microsoft Defender Antivirus found threat in file
name. Please restart and scan your device. Restart and scan |
MANUALSTEPS_REQUIRED |
|
Follow-up
action (restart) |
Microsoft
Defender Antivirus found threat in file. Please restart your device. |
WDAV_REBOOT |
|
Follow-up action (Full scan) |
Review files that Windows
Defender will send to Microsoft. Sending this information can improve how
Microsoft Defender Antivirus helps protect your device. |
SAMPLE_SUBMISSION _REQUIRED |
|
OS
support ending warning |
Support
for your version of Windows is ending. When this support ends, Microsoft
Defender Antivirus won’t be supported, and your device might be at risk. |
SUPPORT_ENDING |
|
OS support ended, device at risk |
Support for your version of Windows has ended.
Microsoft Defender Antivirus is no longer supported, and your device might be
at risk. |
SUPPORT_ENDED and SUPPORT_ENDED_NO _DEFENDER |
|
Summary
notification, items found |
Microsoft
Defender Antivirus successfully took action on n threats since your last
summary. Your device was scanned n times. |
RECAP_FOUND_THREATS _SCANNED |
|
Summary notification, items found, no scan
count |
Microsoft Defender Antivirus successfully took action
on n threats since your last summary. |
RECAP_FOUND_THREATS |
|
Summary
notification, no items found, scans performed |
Microsoft
Defender Antivirus did not find any threats since your last summary. Your
device was scanned n times. |
RECAP_NO
THREATS _SCANNED |
|
Summary notification, no items found, no
scans |
Microsoft Defender Antivirus did not find any threats
since your last summary. |
RECAP_NO_THREATS |
|
Scan
finished, manual, threats found |
Microsoft
Defender Antivirus scanned your device at timestamp on date, and took action
against threats. |
RECENT_SCAN_FOUND _THREATS |
|
Scan finished, manual, no threats found |
Microsoft Defender Antivirus scanned your device at
timestamp on date. No threats were found. |
RECENT_SCAN_NO_THREATS |
|
Threat
found |
Microsoft
Defender Antivirus found threats. Get details. |
CRITICAL |
|
LPS on notification |
Microsoft Defender Antivirus is periodically scanning
your device. You’re also using another antivirus program for active
protection. |
PERIODIC_SCANNING_ON |
|
Long
running BaFS |
Your
IT administrator requires a security scan of this item. The scan could take
up to n seconds. |
BAFS |
|
Long running BaFS
customized |
Company requires a security scan of this item. The
scan could take up to n seconds. |
BAFS_DETECTED_CUSTOM (body) |
|
Sense
detection |
This
application was removed because it was blocked by your IT security settings. |
WDAV_SENSE_DETECTED |
|
Sense detection customized |
This application was removed because it was blocked
by your IT security settings. |
WDAV_SENSE_DETECTED _CUSTOM (body) |
|
Ransomware
specific detection |
Microsoft
Defender Antivirus has detected threats which may include ransomware. |
WDAV_RANSOMWARE _DETECTED |
|
ASR (HIPS) block |
Your IT administrator caused Windows Defender
Security Center to block this action. Contact your IT help desk. |
HIPS_ASR_BLOCKED |
|
ASR
(HIPS) block customized |
Company
caused Windows Defender Security Center to block this action. Contact your IT
help desk. |
HIPS_ASR_BLOCKED_CUSTOM
(body) |
|
CFA (FolderGuard)
block |
Controlled folder access blocked process from making
changes to the folder path. |
FOLDERGUARD_BLOCKED |
|
Network
protect (HIPS) network block customized |
Company
caused Windows Defender Security Center to block this network connection.
Contact your IT help desk. |
HIPS_NETWORK_BLOCKED _CUSTOM
(body) |
|
Network protection (HIPS) network block |
Your IT administrator caused Windows Defender
Security Center to block this network connection. Contact your IT help desk. |
HIPS_NETWORK_BLOCKED |
|
PUA
detection, not blocked |
Your
settings cause the detection of any app that might perform unwanted actions
on your computer. |
PUA_DETECTED |
|
PUA notification |
Your IT settings caused Microsoft Defender Antivirus
to block an app that may potentially perform unwanted actions on your device. |
PUA_BLOCKED |
|
PUA
notification, customized |
Company
caused Microsoft Defender Antivirus to block an app that may potentially
perform unwanted actions on your device. |
PUA_BLOCKED_CUSTOM
(body) |
|
Network isolation ended |
|
|
|
Network
isolation ended, customized |
|
|
|
Restricted access ended |
|
|
|
Restricted
access ended, customized |
|
|
|
Dynamic lock on, but bluetooth
off |
|
|
|
Dynamic
lock on, bluetooth on, but device unpaired |
|
|
|
Dynamic lock on, bluetooth
on, but unable to detect device |
|
|
|
NoPa or federated no hello |
|
|
|
NoPa or federated hello broken |
| |