Select cloud protection level: registry value MpCloudBlockLevelComputerHKLM\Software\Policies\Microsoft\Windows Defender\MpEngine

Policy ID
MpEngine_MpCloudBlockLevel
Scope
Computer Configuration
Supported on
At least Windows Server 2016, Windows 10
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Microsoft Defender Antivirus › MpEngine

Registry

MpCloudBlockLevel

-Computer

MpCloudBlockLevel

REG_DWORDComputer
Enabled value
Depends on the option value
Element
Select cloud blocking level
Options
ItemStored value
Default blocking level0
Moderate blocking level1
High blocking level2
High+ blocking level4
Zero tolerance blocking level6
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\MpEngine]

; Options (use only one)
; Default blocking level
"MpCloudBlockLevel"=dword:00000000
; Moderate blocking level
"MpCloudBlockLevel"=dword:00000001
; High blocking level
"MpCloudBlockLevel"=dword:00000002
; High+ blocking level
"MpCloudBlockLevel"=dword:00000004
; Zero tolerance blocking level
"MpCloudBlockLevel"=dword:00000006
CMD
:: Options (use only one)

:: Default blocking level
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v "MpCloudBlockLevel" /t REG_DWORD /d 0 /f
:: Moderate blocking level
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v "MpCloudBlockLevel" /t REG_DWORD /d 1 /f
:: High blocking level
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v "MpCloudBlockLevel" /t REG_DWORD /d 2 /f
:: High+ blocking level
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v "MpCloudBlockLevel" /t REG_DWORD /d 4 /f
:: Zero tolerance blocking level
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v "MpCloudBlockLevel" /t REG_DWORD /d 6 /f
PowerShell
# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\MpEngine' -Force | Out-Null

# Options (use only one)
# Default blocking level
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\MpEngine' -Name 'MpCloudBlockLevel' -PropertyType DWord -Value 0 -Force | Out-Null
# Moderate blocking level
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\MpEngine' -Name 'MpCloudBlockLevel' -PropertyType DWord -Value 1 -Force | Out-Null
# High blocking level
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\MpEngine' -Name 'MpCloudBlockLevel' -PropertyType DWord -Value 2 -Force | Out-Null
# High+ blocking level
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\MpEngine' -Name 'MpCloudBlockLevel' -PropertyType DWord -Value 4 -Force | Out-Null
# Zero tolerance blocking level
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows Defender\MpEngine' -Name 'MpCloudBlockLevel' -PropertyType DWord -Value 6 -Force | Out-Null