Configure detection for potentially unwanted applications
- Policy ID
- Root_PUAProtection
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10 Version 1607
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus
Description
Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer.
Enabled:
Specify the mode in the Options section:
-Block: Potentially unwanted software will be blocked.
-Audit Mode: Potentially unwanted software will not be blocked, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs.
Disabled:
Potentially unwanted software will not be blocked.
Not configured:
Same as Disabled.
Options
Registry
ComputerHKEY_LOCAL_MACHINE
- PUAProtection-
- PUAProtectionREG_DWORD