Merge pull request #312682 from msmbaldwin/vm-ade

Add warnings about Antimalware extension overwriting Defender AV settings

Author: prmerger-automator[bot]

articles/security/fundamentals/antimalware-code-samples.md

@@ -29,6 +29,9 @@ You can use these samples to deploy and configure the Microsoft Antimalware exte
 > [!NOTE]
 > Before executing this code sample, you must uncomment the variables and provide appropriate values.
 
+> [!WARNING]
+> Deploying or updating this extension replaces existing Microsoft Defender Antivirus settings, including exclusions. To preserve your settings, specify them in the extension configuration. For more information, see [Default and Custom Antimalware Configuration](antimalware.md#default-and-custom-antimalware-configuration).
+
 ```powershell
 # Script to add Microsoft Antimalware extension to Azure Resource Manager VMs
 # Specify your subscription ID
@@ -84,6 +87,9 @@ The code sample below shows how you can enable IaaS Antimalware extension using
 > [!NOTE]
 > Before executing this code sample, you must uncomment the variables and provide appropriate values.
 
+> [!WARNING]
+> Deploying or updating this extension replaces existing Microsoft Defender Antivirus settings, including exclusions. To preserve your settings, specify them in the extension configuration. For more information, see [Default and Custom Antimalware Configuration](antimalware.md#default-and-custom-antimalware-configuration).
+
 ```powershell
 # Script to add Microsoft Antimalware extension to VM Scale Set(VMSS) and Service Fabric Cluster(in turn it used VMSS)
 # Login to your Azure Resource Manager Account and select the Subscription to use
@@ -137,6 +143,9 @@ The code sample below shows how you can add or configure Microsoft Antimalware t
 > [!NOTE]
 > Before executing this code sample, you must uncomment the variables and provide appropriate values.
 
+> [!WARNING]
+> Deploying or updating this extension replaces existing Microsoft Defender Antivirus settings, including exclusions. To preserve your settings, specify them in the extension configuration. For more information, see [Default and Custom Antimalware Configuration](antimalware.md#default-and-custom-antimalware-configuration).
+
 ```powershell
 # Create Antimalware extension object, where file is the AntimalwareSettings
 $xmlconfig = [IO.File]::ReadAllText("C:\path\to\file.xml")

articles/security/fundamentals/antimalware.md

@@ -98,6 +98,9 @@ The default configuration settings are applied to enable Antimalware for Azure C
 
 The following table summarizes the configuration settings available for the Antimalware service. The default configuration settings are marked under the column labeled "Default."
 
+> [!WARNING]
+> Deploying or updating the Microsoft Antimalware extension replaces existing Microsoft Defender Antivirus settings, including exclusions.
+
 ![Table 1](./media/antimalware/sec-azantimal-tb18.png)
 
 ## Antimalware deployment scenarios