Security recommendations in Microsoft Defender Portal

Muhammad Zeeshan 100

Hi I have many VA that need to be remediate but first i want to test on single device after that i want to float on all but how is that possible

But when i click on request Remediation it open another page where i run on all User's image

User's image

Ravi Kanth Koppala 3,231 Reputation points Microsoft Employee

2023-12-16T02:48:23.57+00:00
@Muhammad Zeeshan

To test remediation on a single device before applying it to all, you can follow these steps:

Sign in to the Azure portal (https://portal.azure.com).

Navigate to Microsoft Defender for Cloud > Recommendations.

Select a recommendation to remediate.

Select Take action.

Locate the Remediate section and follow the remediation instructions.

Before clicking on "Request remediation", click on "Preview remediation" to preview the remediation on a single device.

Once you are satisfied with the preview, you can click on "Request remediation" to apply the remediation to all devices.

You can also group recommendations by risk level to remediate the most critical recommendations first. To do this, follow these steps:

Sign in to the Azure portal (https://portal.azure.com).

Navigate to Microsoft Defender for Cloud > Recommendations.

Select Group by > Primary grouping > Risk level > Apply.

Recommendations are displayed in groups of risk levels.

If the suggestion doesn't solve your problem. Can you please explain the question in detail so that the community can help you? Thanks.

References:

Remediate security recommendations

AI Note: This comment is generated using the Microsoft Q&A AI Assist tool.
Muhammad Zeeshan 100 Reputation points

2023-12-18T07:36:05.8633333+00:00
I Have Microsoft Defender Portal I cannot see the setting you have shared

Select Take action.

Locate the Remediate section and follow the remediation instructions.

Before clicking on "Request remediation", click on "Preview remediation" to preview the remediation on a single device.

Once you are satisfied with the preview, you can click on "Request remediation" to apply the remediation to all devices.
Givary-MSFT 30,251 Reputation points Microsoft Employee

2023-12-26T08:32:14.8533333+00:00

@Muhammad Zeeshan Wanted to check the status of this post, from the above comments, not sure whether your ask has been resolved or not ?

Let me know if you are looking more help on this ask.
Muhammad Zeeshan 100 Reputation points

2023-12-27T08:04:22.52+00:00

Actually I want to remediate on single device but when i select request for remediate it pick all systems because initially i want to check behavior's on single computer

Accepted answer

Bruno Eugenio Dos Santos 80 Reputation points

2024-01-03T14:09:49.6833333+00:00

Simple, you go to the Defender for Endpoint settings, create a group with the machine you want to fix, put it in that group, then go to Security Recommendations and in the filter select Filter by device groups, there you will fix it for only one device , including opening a request for only one device.

If I helped you, give me a follow, thanks!

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.
Please sign in to rate this answer.
Givary-MSFT 30,251 Reputation points Microsoft Employee

2024-01-09T11:31:50.4966667+00:00

@Muhammad Zeeshan Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Sign in to comment

Share via

Security recommendations in Microsoft Defender Portal

0 additional answers