Prevent users and apps from accessing dangerous websites
- Policy ID
- ExploitGuard_EnableNetworkProtection
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10 Version 1709
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus › Microsoft Defender Exploit Guard › Network Protection
Description
Enable or disable Microsoft Defender Exploit Guard network protection to prevent employees from using any application to access dangerous domains that may host phishing scams, exploit-hosting sites, and other malicious content on the Internet.
Enabled:
Specify the mode in the Options section:
-Block: Users and applications will not be able to access dangerous domains
-Audit Mode: Users and applications can connect to dangerous domains, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs.
Disabled:
Users and applications will not be blocked from connecting to dangerous domains.
Not configured:
Same as Disabled.
Options
Registry
ComputerHKEY_LOCAL_MACHINE
HKLM\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection View registry values
- EnableNetworkProtection-
- EnableNetworkProtectionREG_DWORD