Turn on heuristics
- Policy ID
- Scan_DisableHeuristics
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2012, Windows 8 or Windows RT
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Antivirus › Scan
Description
This policy setting allows you to configure heuristics. Suspicious detections will be suppressed right before reporting to the engine client. Turning off heuristics will reduce the capability to flag new threats. It is recommended that you do not turn off heuristics.
If you enable or do not configure this setting, heuristics will be enabled.
If you disable this setting, heuristics will be disabled.
Registry
ComputerHKEY_LOCAL_MACHINE
- DisableHeuristicsREG_DWORD