Allow real-time security intelligence updates based on reports to Microsoft MAPS

Policy ID
SignatureUpdate_RealtimeSignatureDelivery
Scope
Computer Configuration
Supported on
At least Windows Server 2012, Windows 8 or Windows RT
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Microsoft Defender Antivirus › Security Intelligence Updates

Description

This policy setting allows you to enable real-time security intelligence updates in response to reports sent to Microsoft MAPS. If the service reports a file as an unknown and Microsoft MAPS finds that the latest security intelligence update has security intelligence for a threat involving that file, the service will receive all of the latest security intelligence for that threat immediately. You must have configured your computer to join Microsoft MAPS for this functionality to work.

If you enable or do not configure this setting, real-time security intelligence updates will be enabled.

If you disable this setting, real-time security intelligence updates will disabled.

Registry

ComputerHKEY_LOCAL_MACHINE
  • RealtimeSignatureDeliveryREG_DWORD

Other policies in the same category

View all policies in this category (18)