Event ID 1121 – Exploit Guard – Microsoft Intune
Today I was getting Event ID 1121 in Windows Event Viewer while managing Windows Defender through Microsoft Intune. It took me a little bit of time to track down the exact cause as Microsoft have removed the GUIDs from the descriptions in the policy properties. I thought it would be a good idea to give an overview and include some useful references. Background Firstly, this blog applies to those running Attack Surface Reduction (ASR) through Microsoft Intune. These settings can…