When a file with a specific reputation tries to run on your system, Adaptive Threat Protection might prompt you for input to continue. The prompt appears only if Adaptive Threat Protection is installed and configured to prompt.
Note
Adaptive Threat Protection depends on the Trellix system tray icon to display prompts. On systems accessed only by RDP, the system tray icon doesn't start and prompts don't appear. To work around this issue, add the UpdaterUI.exe to the logon script. See KB83532.
The administrator configures the reputation threshold, at which point, a prompt is displayed. For example, if the reputation threshold is Unknown, Endpoint Security prompts you for all files with an unknown reputation and below.
If you don't select an option, Adaptive Threat Protection takes the default action configured by the administrator.
The prompt, timeout, and default action depend on how Adaptive Threat Protection is configured.
Note
Windows 8 and 10 use toast notifications — messages that pop up to notify you of both alerts and prompts. Click the toast notification to display the notification in Desktop mode.
(Optional) At the prompt, enter a message to send to the administrator.
For example, use the message to describe the file or explain your decision to allow or block the file on your system.
Click Allow or Block.
Allow
Allows the file.
Block
Blocks the file on your system.
To instruct Adaptive Threat Protection not to prompt for the file again, select Remember this decision.
Adaptive Threat Protection acts, based on your choice or the default action, and closes the prompt window.