{"id":6541,"date":"2026-10-08T11:56:19","date_gmt":"2026-10-08T08:56:19","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=support_article&p=6541"},"modified":"2026-10-08T11:56:19","modified_gmt":"2026-10-08T08:56:19","slug":"file-scanning-action-is-set-to-ask-after-scan-but-elements-agent-still-quarantines-a-file","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/jp-ja\/support-articles\/file-scanning-action-is-set-to-ask-after-scan-but-elements-agent-still-quarantines-a-file\/","title":{"rendered":"File Scanning Action is set to “Ask after scan” but Elements Agent still quarantines a file"},"content":{"rendered":"

Issue:<\/h3>\n

We have in our Elements profile for Elements Endpoint Protection for Server \/ Computers set the File scanning action as "Ask after scan", but files are still quarantined automatically when they scanned. Why are files still quarantined?<\/p>\n

Resolution:<\/h3>\n

There are many reasons why the files could still get quarantined. First we recommend to go to the Security Events page in the Elements Security Center portal to check the detection for the quarantine event. From the detection you can check if the file in question was a malware, riskware or spyware.\u00a0<\/p>\n

If the file has been detected as either riskware or spyware, they have separate actions available on the real-time scanning settings page in the profile:<\/p>\n

    \n
  1. Log in to the Elements Security Center portal<\/li>\n
  2. Navigate to the Security Configurations > Profiles<\/strong> page<\/li>\n
  3. Click on the profile that is in use on the device<\/li>\n
  4. Go to the Real-time scanning <\/strong>settings page<\/li>\n
  5. Scroll down to the File scanning <\/strong>section<\/li>\n
  6. Check the following actions that they are set as Ask after scan<\/strong>:\n
      \n
    1. Action on riskware<\/strong><\/li>\n
    2. Action on spyware<\/strong><\/li>\n<\/ol>\n<\/li>\n
    3. Click Save profile<\/strong><\/li>\n<\/ol>\n

      Scheduled scans are considered manual scans, so if the file was quarantined during a scheduled or manual scan, you need to check the Manual scanning settings for the Action on infection<\/strong>.\u00a0<\/p>\n

        \n
      1. Log in to the Elements Security Center portal<\/li>\n
      2. Navigate to the Security Configurations > Profiles<\/strong> page<\/li>\n
      3. Click on the profile that is in use on the device<\/li>\n
      4. Go to the Manual scanning <\/strong>settings page<\/li>\n
      5. Scroll down to the Manual scanning <\/strong>section<\/li>\n
      6. Make sure that the Action on infection <\/strong>is set as Ask after scan<\/strong><\/li>\n
      7. Click Save profile<\/strong><\/li>\n<\/ol>\n

        \u00a0<\/p>\n

        We also recommend to check in the profile on the End user rights <\/strong>page that all the settings are locked. If settings are left unlocked, a local user could have changed the settings locally.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

        Our profile for servers is set to ask on infection. We have data that is not to be altered in some folders unless absolutely neccessary. Upon installation of the Elements for Servers agent, we received alerts that data was quarantined from one of the folders that we are not to alter. Why was this file quarantined? We have the profile applied to only ask\/warn. What can we change in the profile to prevent quarantine in the future?<\/p>\n","protected":false},"template":"","support_article_product":[99],"class_list":["post-6541","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000005146","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-08 08:56:19","import_hash":"e6a380db6c2cd0ae9b12fef9e486b39d3999f872","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/support_article\/6541","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/media?parent=6541"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/jp-ja\/wp-json\/wp\/v2\/support_article_product?post=6541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}