Recover Auto-Quarantined user assets

Auto-Quarantined user assets are endpoint assets that are currently in the auto-quarantined state. The device posture of these assets must be improved for them to regain their access by their Xaccess policies. Otherwise, their access is restricted to the private networks and domains listed in the associated Auto Quarantine templates.

Currently, when assets are auto-quarantined, notifications are not displayed on the assets.

When an asset does not meet any Auto Quarantine conditions, the Auto Quarantine policies are revoked, and the Xaccess policies are restored on the asset.

Windows

The recovery actions listed here may require IT personnel's intervention. Some of the actions require elevated native OS privileges on the asset.

Condition	Recovery action
Domain (s) Joined	Contact your organization's IT administrator to remove the asset from the domain-joined domains.
Firewall	Turn on Windows Defender Firewall
OS Last Update	Connect to the Internet or your organization's internal OS update server and update the OS. Contact your organization's IT administrator if you are unable to update the OS. To reduce false positives, we recommend that you set favorable 'Active hours' for updates.

macOS

The recovery actions listed here may require IT personnel's intervention. Some of the actions require elevated native OS privileges on the asset.

Condition	Recovery action
Disk Encryption	Turn on FileVault
Domain (s) Joined	Contact your organization's IT administrator to remove the asset from the domain-joined domains.
Firewall	Turn on Application Firewall
OS Last Update	Connect to the Internet or your organization's internal OS update server and update the OS. Contact your organization's IT administrator if you are unable to update the OS.