This message was deleted.
# citrix-vads
Slackbot
01/28/2020, 2:07 PMThis message was deleted.
d
David Inglis
01/28/2020, 7:07 PMHave you seen the baseline GPOs from MS? There are Defender GPOs that may help. https://www.microsoft.com/en-us/download/details.aspx?id=55319
👍 1
d
Daniel Marsh
01/28/2020, 10:47 PMOne of my customers does, using recommended settings for VDI - we also have a scheduled task to download defs and a machine startup task to install the updates at startup.
c
Cory Zaner
01/29/2020, 1:08 PMFollowing
s
Salvi
01/31/2020, 10:17 AMYes we use it... will check it a soon i am back in the office, keep you post it
👍 1
j
Julian Jakob
02/02/2020, 8:41 PMThanks David, will Check the GPOs from MS.
@Daniel Marsh : Is there a documentation about recommended settings for VDI?
@Salvi : Thanks, can‘t wait to take a look at your settings 👌🏼
d
Daniel Marsh
02/03/2020, 2:13 AM@Julian Jakob I used this MS article plus the usual Citrix best practice guide on TechZone. We are downloading the defs to a network share using a script (A Windows port of wget or similar I think - I need to take another look at the environment to refresh my memory) and then a machine startup script to install those defs silently. https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/deployment-vdi-windows-defender-antivirus
💯 1
s
Salvi
02/03/2020, 8:29 PMHi @Julian Jakob, my apologies, I thought we use some default setting over GPO, but in reality we only activate windows defender over GPO but the whole management goes over SCCM. Sorry for the misleading statement.
j
Jonathan Pitre
02/11/2020, 1:54 AMJonathan Pitre
02/11/2020, 4:31 PMAlso, it's good to note that Citrix Optimizer get rid of the scheduled tasks for Windows Defender. We are currently in the process of migrating 2000 users from Win7 to Win10 and our Windows Server 2019 file clusters got super slow yesterday. It was caused by Windows Defender being unoptimized. It's critical that Defender is optimized adequately otherwise it will kill you're storage performance. Also the latest Windows 2019 updates (Jan 23) resolved some important performance issue with ReFS. I suggest you patch asap.
Jonathan Pitre
02/15/2020, 9:08 PMAlso we found out that Windows 10 automatic maintenance reenabled the Defender scheduled scans....so we got rid of it as well. I don't think automatic maintenance is a good idea on non-persistent images.
https://winaero.com/blog/how-to-disable-automatic-maintenance-in-windows-10/
j
Julian Jakob
02/20/2020, 9:53 PMThanks Jonathan for your detailed Infos and experiences! Will doing some tests in the near future.
👍 1