You can enable ransomware protection on a Windows MediaAgent.
By default, ransomware protection is enabled on all Windows MediaAgents that have access to a disk library mountpath.
From the navigation pane, go to Manage > Infrastructure.
The Infrastructure page appears.
Click the MediaAgents tile.
The MediaAgents page appears.
Click the MediaAgent.
In the Control section, move the Ransomware protection toggle key to the right.
Administrative shares pose a security vulnerability on disk library mount paths and must be disabled on the MediaAgents hosting the shares. For more information, see Reconfiguring Mount Paths that Use Administrative Share.