World of EUC

Hi all, what are the recommended settings for Defender for Endpoint on a non-persistent VDI?
I have an environment where the cache disk gets filled really quick and I was able to identify MsMpEng.exe as the reason.

The master VM is non onboarded and we use the onboarding for the worker VMs.

Did you follow MS recommendations? <https://learn.microsoft.com/en-us/defender-endpoint/deployment-vdi-microsoft-defender-antivirus|Configure Microsoft Defender Antivirus on a remote desktop or virtual desktop infrastructure environment - Microsoft Defender for Endpoint | Microsoft Learn>

Great thx, I'll have a look at those settings. Looks like we have to configure at least "Define security intelligence location for VDI clients" and schedule downloads on a dedicated VM.

FYI: The issue was caused by the  Windows Defender Cache Maintenance scheduled task which was running on the worker VMs.
We'll create a custom script to run the Task during BIS-F sealing.