Windows Defender Antivirus catch-up scan options should be Enabled not Block
Because of Intune insidiously adding extra settings in our other configuration profiles,
some of our Windows computers appear to not perform catch-up scans on wake/restart, despite us cleaning up the rogue settings back to Not configured.
Thinking about it though, shouldn't those options afford Enabled instead of Block? Actually there are many more settings scattered all over that I don't understand why the only option is to block. Surely organisations would want more flexible options for their policies.