Prevent users from modifying settings
- Policy ID
- AppBrowserProtection_DisallowExploitProtectionOverride
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10 Version 1709
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Windows Security › App and browser protection
Description
Prevent users from making changes to the Exploit protection settings area in Windows Security.
Enabled:
Local users can not make changes in the Exploit protection settings area.
Disabled:
Local users are allowed to make changes in the Exploit protection settings area.
Not configured:
Same as Disabled.
Registry
ComputerHKEY_LOCAL_MACHINE
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection View registry values
- DisallowExploitProtectionOverrideREG_DWORD