Prevent users and apps from accessing dangerous websites

Policy ID
ExploitGuard_EnableNetworkProtection
Scope
Computer Configuration
Supported on
At least Windows Server 2016, Windows 10 Version 1709
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Microsoft Defender Antivirus › Microsoft Defender Exploit Guard › Network Protection

Description


Enable or disable Microsoft Defender Exploit Guard network protection to prevent employees from using any application to access dangerous domains that may host phishing scams, exploit-hosting sites, and other malicious content on the Internet.

Enabled:
Specify the mode in the Options section:
-Block: Users and applications will not be able to access dangerous domains
-Audit Mode: Users and applications can connect to dangerous domains, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs.

Disabled:
Users and applications will not be blocked from connecting to dangerous domains.

Not configured:
Same as Disabled.

Options

    • Disable (Default)
    • Block
    • Audit Mode

Registry

ComputerHKEY_LOCAL_MACHINE
  • EnableNetworkProtection-
  • EnableNetworkProtectionREG_DWORD

Other policies in the same category

View all policies in this category (2)