Configure detection for potentially unwanted applications

Policy ID
Root_PUAProtection
Scope
Computer Configuration
Supported on
At least Windows Server 2016, Windows 10 Version 1607
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Microsoft Defender Antivirus

Description


Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer.

Enabled:
Specify the mode in the Options section:
-Block: Potentially unwanted software will be blocked.
-Audit Mode: Potentially unwanted software will not be blocked, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs.

Disabled:
Potentially unwanted software will not be blocked.

Not configured:
Same as Disabled.

Options

    • Disable (Default)
    • Block
    • Audit Mode

Registry

ComputerHKEY_LOCAL_MACHINE
  • PUAProtection-
  • PUAProtectionREG_DWORD

Other policies in the same category

View all policies in this category (18)