How do I add or remove items from the Endpoint Protection allowed list?
Updated: April 1, 2012
Applies To: Forefront Endpoint Protection, System Center 2012 Configuration Manager, System Center 2012 Configuration Manager SP1, System Center 2012 Endpoint Protection, System Center 2012 Endpoint Protection SP1, Windows Intune
If you trust software that Endpoint Protection has detected, you can stop Endpoint Protection from alerting you about risks that the software might pose to your privacy or your computer. To stop receiving alerts for this software, you must add the software to the Endpoint Protection allowed list. If you decide that you want to monitor the software again later, you can remove it from the Endpoint Protection allowed list at any time.
To add an item to the allowed list
The next time Endpoint Protection alerts you about the software, click the Show details link.
In the Potential threat details dialog box, click the down arrow in the Recommendation column, and then click Allow.
To remove an item from the allowed list and enable Endpoint Protection to monitor it
Click the History tab, and then select the Allowed items option.
In Windows Vista or Windows 7, click View details to see all of the items. If you're prompted for an administrator password or confirmation, type the password or confirm the action.
In Windows XP, you'll need to log on as an administrator on the computer to see all of the items.
Select the item that you want to monitor, and then click Remove. If you're prompted for an administrator password or confirmation, type the password or confirm the action.
Do not allow software with severe or high alert ratings to run on your computer, because it can put your privacy and the security of your computer at risk.