Expanding on this, ConfigMgr should collect all the Windows Defender events for components it can manage, regardless of whether the customer has ATP. Stepping up to ATP is a significant expense for many customers. Upselling to ATP should be for the benefit of the machine learning enhancements it brings, not manageability of the built-in Windows features.
Updating status to started.
The first iteration/slice of this is available in the 1905 Tech Preview.
50 votesNoted · AdminMark Silvey - ConfigMgr Product Team (Engineering Manager, ConfigMgr, System Center Configuration Manager) responded
This bothers me too! Looking forward to addressing this.
Yes, please. Some basic fit & finish would be nice here. I'd love to hear the technical reason that's causing this, but I'd also really like to see if fixed.
To add to this, it would be really helpful if the entries in the bottom pane had all the right-click options that the resource would have in the Assets & Compliance view: Start Remote Control, Start Resource Explorer, Client Notification, etc.