MT.1155 - Full Scan Mapped Drives should be disabled for performance

Overview

Verify that full scan of mapped network drives is disabled for performance.

Full scan on mapped drives can cause significant performance issues.

Remediation action:

1. Open Microsoft Endpoint Manager > Endpoint Security > Antivirus
2. Edit the relevant Microsoft Defender Antivirus policy
3. Disable Allow Full Scan on Mapped Network Drives

Related links

• Configure Microsoft Defender Antivirus
• Microsoft Endpoint Manager

Test Metadata

Field	Value
Test ID	MT.1155
Severity	High
Suite	Maester
Category	Defender
PowerShell test	Test-MtMdeMappedDriveScanning
Tags	Defender, Maester, MT.1155

Source

• Pester test: tests/Maester/Defender/Test-MtMdeAntivirusPolicy.Tests.ps1
• PowerShell source: powershell/public/maester/defender/Test-MtMdeMappedDriveScanning.ps1