Monitor file and program activity on your computer
- Policy ID
- RealtimeProtection_DisableOnAccessProtection
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2012, Windows 8 or Windows RT
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus › Real-time Protection
Description
This policy setting allows you to configure monitoring for file and program activity.
If you enable or do not configure this setting, monitoring for file and program activity will be enabled.
If you disable this setting, monitoring for file and program activity will be disabled.
Registry
ComputerHKEY_LOCAL_MACHINE
- DisableOnAccessProtectionREG_DWORD