Security News > 2021 > January > Microsoft Defender to enable full auto-remediation by default
Microsoft will enable fully automated threat remediation by default for Microsoft Defender for Endpoint customers who have opted into public previews starting next month, on February 16, 2021.
This change of the default automation level from Semi to Full comes after finding that organizations using full automation by default were more successful in remediating and containing threats.
Since automated investigation and remediation capabilities were first added to Microsoft Defender for Endpoint, organizations with fully automated tenants have been able to successfully remediate and contain threats while tenants with semi-automation were left waiting for manual approval.
"The new default automation level can be kept or changed according to your organizational needs," Microsoft added.
To start using Microsoft Defender for Endpoint public preview capabilities, customers have to manually toggle on preview features in the Microsoft Defender Security Center.
Since October, Microsoft Defender for Endpoint also provides users with vulnerable device tracking capabilities to help them keep track of vulnerable Windows and macOS endpoints within their organization's environment.