Everyone - Microsoft Defender for Endpoint Antivirus Information for End Users

Microsoft Defender for Endpoint is the new antivirus solution being deployed across all College of Western Idaho (CWI) workstations, replacing ESET Endpoint Antivirus. This guide helps end users understand how Defender for Endpoint protects their devices, how to recognize security alerts, and how to check their security status using the Windows Security app.

All About Microsoft Defender for Endpoint Antivirus

The College of Western Idaho is transitioning from ESET Endpoint Antivirus to Microsoft Defender for Endpoint. Microsoft Defender for Endpoint provides advanced protection against security threats, ensuring your device remains secure while you work. Below is a guide to help you identify security alerts and understand basic troubleshooting steps.

Accessing Defender for Endpoint Tools

Microsoft Defender for Endpoint is integrated with Windows Security, allowing you to check your protection status and run scans directly from your computer.

How to Open Windows Security

1. Click the Start Menu.
2. Type Windows Security in the search bar and select it from the results.
3. In the Windows Security dashboard, you will see various protection areas, including Virus & Threat Protection.

How to Check Your Device Status

1. Look for the Defender shield on the Windows task menu
2. Right click on the shield and select from the menu options

OR

1. Open Windows Security:
   • Click the Start Menu > Search for "Windows Security."
2. Locate Virus & Threat Protection.
3. Look for:
   • Green shield: Your device is secure.
   • Yellow warning: Action needed (e.g., update required).
   • Red warning: Immediate action required (e.g., threat detected).

How to Perform a Quick Scan

1. Right click on the Defender task menu icon and select “Run quick scan.”
2. The Windows Security menu will display the status of the scan.

OR

1. Open Windows Security following the steps above.
2. Click on Virus & Threat Protection.
3. Under the Current Threats section, click Quick Scan.

Allow the scan to complete. If any threats are detected, follow the on-screen instructions or contact the CWI Help Desk for further assistance.

Recognizing Alerts and Taking Action

What Does a Security Alert Look Like?

• Microsoft Defender for Endpoint will display alerts as popups and through the Windows Security app.
• You may see pop-ups for:
  • Detected threats.
  • Suspicious activity blocked.
  • Notifications prompting a scan.
• Click on the popup for more details.

Steps to Follow if You See an Alert

1. Note the alert details, such as:
   • The type of threat detected.
   • Any instructions displayed.
2. Do NOT attempt to fix or modify settings yourself.
3. Immediately contact the CWI Help Desk:
   • Phone: 208-562-3444
   • Email: helpdesk@cwi.edu
   • Provide the following details:
     • A screenshot of the alert (if possible).
     • Any recent unusual activity (e.g., suspicious emails).

What NOT to Do

• Do not download or install software to fix issues.
• Do not ignore alerts or dismiss them without reporting.