This settings controls whether Network Protection is allowed to be configured into block or audit mode on Windows Server.
- Policy ID
- AllowNetworkProtectionOnWinServer
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10 Version 1709
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus › Microsoft Defender Exploit Guard › Network Protection
Description
Disabled (Default):
If Not Configured or Disabled, network protection is not allowed to be configured into block or audit mode on Windows Server.
Enabled:
If Enabled, administrators can control whether Network Protection is allowed to be configured into block or audit mode on Windows Server.
Note, that this configuration is dependent on the EnableNetworkProtection configuration. If this configuration is false, EnableNetworkProtection will be ignored, otherwise network protection will start on Windows Server depending on the value of EnableNetworkProtection.
Registry
ComputerHKEY_LOCAL_MACHINE
HKLM\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection View registry values
- AllowNetworkProtectionOnWinServerREG_DWORD