Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Malware Alert Levels in Windows Intune

Updated: December 17, 2012

Applies To: Windows Intune

When Windows Intune Endpoint Protection detects a potential threat, it uses the associated definition file to assign an alert level to the threat. It then applies the default action associated with that threat level.

Malware Alert Levels

In the Windows Intune administrator console, the alert level for a malicious software, or malware, instance is displayed on the Malware tab on the Properties page for the computer on which the software is reported, and on the General tab on the Properties page for the malicious software instance.

Alert levels help you choose how to respond to viruses, spyware, and other potentially unwanted software. The following table provides information about alert levels that are associated with malicious or potentially unwanted software that Endpoint Protection detects on client computers.

For information about how to investigate malicious or potentially unwanted software, see Investigating Malware Activity in Windows Intune.


Alert level

What it means


These are widespread or exceptionally malicious programs, similar to viruses or worms, which negatively affect users’ privacy and the security of their computers, and can damage their computers.


These are programs that might collect users’ personal information and negatively affect their privacy or damage their computers. For example, a program may collect information or changes settings, typically without a user’s knowledge or consent.


These are programs that might affect users’ privacy or make changes to users’ computers that could negatively impact their computing experience. For example, a program may collect personal information or change settings.


This is potentially unwanted software that may collect information about users or computers or may change how their computers work. However, the software is operating in agreement with licensing terms displayed when the software was installed.


The alert level for the software has not been classified yet.

See Also

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
© 2014 Microsoft. All rights reserved.