I'm a bit unclear on these options in the Managment Suite Console 8.8 (SP3).
There are options for System Defenses which are
Remove All Policy
Then there is a System Defense Remediation which will restore a machine that had triggered one of the above System Defenses.
This all makes complete sense
What I'm unclear about is the Enhanced System Defense. There is only a Turn ON or Turn OFF option in the General Configuration. What does this do? How and why would a machine get placed in the Enhanced System Defense Remediation stage?
Let me know your expert opinions on this.