We currently have Endpoint Security with Threat Prevention and Firewall enabled for the enterprise. Some of our users have notified us that they are getting pop ups from Windows Defender that these products have been turned off.
I checked on one of them and they are turned on and managed by McAfee ENS. Additionally, I went to the SecurityCenter logs of one of the machines affected and saw one of the logs that shows -
"Updated McAfee Endpoint Security status successfully to SECURITY_PRODuCT_STATE_SNOOZED". This appears to have occured when the notification comes up.
Are these showing up if the machine has been offline and updates are out of date?
I just wanted to verify if anyone has seen this come up and is there a way to suppress these alerts.