Turn on process scanning whenever real-time protection is enabled
- Policy ID
- RealtimeProtection_DisableScanOnRealtimeEnable
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2012, Windows 8 or Windows RT
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus › Real-time Protection
Description
This policy setting allows you to configure process scanning when real-time protection is turned on. This helps to catch malware which could start when real-time protection is turned off.
If you enable or do not configure this setting, a process scan will be initiated when real-time protection is turned on.
If you disable this setting, a process scan will not be initiated when real-time protection is turned on.
Registry
ComputerHKEY_LOCAL_MACHINE
- DisableScanOnRealtimeEnableREG_DWORD