HKLM\Software\Policies\Microsoft\Windows Defender

16 subkeys · 18 Group Policy settings use this key

Group Policy settings that use this key

18 results

1. Allow antimalware service to remain running always

   Value name: ServiceKeepAlive REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

2. Allow antimalware service to startup with normal priority

   Value name: AllowFastServiceStartup REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

3. Configure detection for potentially unwanted applications

   Value name: PUAProtection 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

4. Configure local administrator merge behavior for lists

   Value name: DisableLocalAdminMerge REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

5. Configure scheduled task times randomization window

   Value name: SchedulerRandomizationTime 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

6. Control whether exclusions are visible to local users

   Value name: HideExclusionsFromLocalUsers REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

7. Control whether or not exclusions are visible to Local Admins

   Value name: HideExclusionsFromLocalAdmins REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

8. Define addresses to bypass proxy server

   Value name: ProxyBypass 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

9. Define proxy auto-config (.pac) for connecting to the network

   Value name: ProxyPacUrl 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

10. Define proxy server for connecting to the network

    Value name: ProxyServer 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

11. Define the directory path to copy support log files

    Value name: SupportLogLocation 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

12. Randomize scheduled task times

    Value name: RandomizeScheduleTaskTimes REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

13. Select the channel for Microsoft Defender daily security intelligence updates

    Value name: SignaturesRing 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

14. Select the channel for Microsoft Defender monthly engine updates [to be deprecated]

    Value name: EngineRing 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

15. Select the channel for Microsoft Defender monthly platform updates [to be deprecated]

    Value name: PlatformRing 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

16. Select the Microsoft Defender safe deployment channel

    Value name: DeploymentChannel 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

17. Turn off Microsoft Defender Antivirus

    Value name: DisableAntiSpyware REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

18. Turn off routine remediation

    Value name: DisableRoutinelyTakingAction REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus Go to policy

Subkeys

• Device Control 10 policies below
• Exclusions 5 policies below
• Features 3 policies below
• MpEngine 4 policies below
• NIS 6 policies below
• Quarantine 2 policies below
• Real-Time Protection 16 policies below
• Remediation 11 policies below
• Reporting 10 policies below
• Scan 33 policies below
• Signature Updates 18 policies below
• SmartScreen 1 policy below
• Spynet 4 policies below
• Threats 2 policies below
• UX Configuration 3 policies below
• Windows Defender Exploit Guard 8 policies below

Other keys in Microsoft

• Windows 1,551 policies below
• Edge 866 policies below
• Internet Explorer 222 policies below
• Windows NT 211 policies below
• UEV 126 policies below
• office 90 policies below
• MicrosoftEdge 56 policies below
• Power 51 policies below
• EdgeUpdate 46 policies below
• FVE 44 policies below

View all of Microsoft