Team: Huntress Managed Endpoint Detection and Response (EDR)
Product: Managed Windows Defender
Environment: Windows OS, Huntress platform
Summary: Enabling Windows Defender by enforcing the policy
Enforce mode "enforces" the policy settings you have set in Huntress (via local Group Policy), which would be your exclusion list (whitelist/blacklist) and UI settings. While in Audit mode, Huntress Managed AV cannot change policy, however the Huntress SOC will still be able to ingest Defender telemetry data.
See Enabling Microsoft Defender (using Powershell) and Support Limitations for Microsoft Defender for more information.