HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection

0 subkeys · 16 Group Policy settings use this key

Group Policy settings that use this key

16 results

1. Configure local setting override for monitoring file and program activity on your computer

   Value name: LocalSettingOverrideDisableOnAccessProtection REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

2. Configure local setting override for monitoring for incoming and outgoing file activity

   Value name: LocalSettingOverrideRealtimeScanDirection REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

3. Configure local setting override for scanning all downloaded files and attachments

   Value name: LocalSettingOverrideDisableIOAVProtection REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

4. Configure local setting override for turn on behavior monitoring

   Value name: LocalSettingOverrideDisableBehaviorMonitoring REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

5. Configure local setting override to turn on real-time protection

   Value name: LocalSettingOverrideDisableRealtimeMonitoring REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

6. Configure monitoring for incoming and outgoing file and program activity

   Value name: RealtimeScanDirection 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

7. Configure performance mode status

   Value name: DisableAsyncScanOnOpen REG_DWORD · Enabled 0 · Disabled 1 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

8. Configure real-time protection and Security Intelligence Updates during OOBE

   Value name: OobeEnableRtpAndSigUpdate REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

9. Define the maximum size of downloaded files and attachments to be scanned

   Value name: IOAVMaxSize 1 element Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

10. Monitor file and program activity on your computer

    Value name: DisableOnAccessProtection REG_DWORD · Enabled 0 · Disabled 1 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

11. Scan all downloaded files and attachments

    Value name: DisableIOAVProtection REG_DWORD · Enabled 0 · Disabled 1 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

12. Turn off real-time protection

    Value name: DisableRealtimeMonitoring REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

13. Turn on behavior monitoring

    Value name: DisableBehaviorMonitoring REG_DWORD · Enabled 0 · Disabled 1 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

14. Turn on process scanning whenever real-time protection is enabled

    Value name: DisableScanOnRealtimeEnable REG_DWORD · Enabled 0 · Disabled 1 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

15. Turn on raw volume write notifications

    Value name: DisableRawWriteNotification REG_DWORD · Enabled 0 · Disabled 1 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

16. Turn on script scanning

    Value name: DisableScriptScanning REG_DWORD · Enabled 0 · Disabled 1 Computer Configuration › Administrative Templates › Windows Components › Microsoft Defender Antivirus › Real-time Protection Go to policy

Other keys in Windows Defender

• Scan 33 policies below
• Signature Updates 18 policies below
• Remediation 11 policies below
• Device Control 10 policies below
• Reporting 10 policies below
• Windows Defender Exploit Guard 8 policies below
• NIS 6 policies below
• Exclusions 5 policies below
• MpEngine 4 policies below
• Spynet 4 policies below

View all of Windows Defender