Windows defender administrative template

This scan operates in addition to the Windows Defender SmartScreen filter, which scans files before and during downloading. Enabled Monitor file and program activity on your computer The Microsoft Defender Antivirus engine makes note of any file changes file writes, such as moves, copies, or modifications and general program activity programs that are opened or running and that cause other programs to run.

Enabled Turn on raw volume write notifications Information about raw volume writes will be analyzed by behavior monitoring.

Enabled Turn on process scanning whenever real-time protection is enabled You can independently enable the Microsoft Defender Antivirus engine to scan running processes for suspicious modifications or behaviors.

This is useful if you have temporarily disabled real-time protection and want to automatically scan processes that started while it was disabled.

Enabled Define the maximum size of downloaded files and attachments to be scanned You can define the size in kilobytes. Enabled Configure local setting override for turn on behavior monitoring Configure a local override for the configuration of behavior monitoring.

This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting. Enabled Configure local setting override for scanning all downloaded files and attachments Configure a local override for the configuration of scanning for all downloaded files and attachments.

Enabled Configure local setting override for monitoring file and program activity on your computer Configure a local override for the configuration of monitoring for file and program activity on your computer. Enabled Configure local setting override to turn on real-time protection Configure a local override for the configuration to turn on real-time protection.

Enabled Configure local setting override for monitoring for incoming and outgoing file activity Configure a local override for the configuration of monitoring for incoming and outgoing file activity. Any link to or advocacy of virus, spyware, malware, or phishing sites. Any other inappropriate content or behavior as defined by the Terms of Use or Code of Conduct. Any image, link, or discussion related to child pornography, child nudity, or other child abuse or exploitation.

You may download the ADM file by going to this link. It provides a complete set of Administrative Template. Was this reply helpful? Yes No. Download Microsoft Edge More info. Contents Exit focus mode. Is this page helpful?

Please rate your experience Yes No. Any additional feedback? Tip Download the Group Policy Reference Spreadsheet, which lists the policy settings for computer and user configurations that are included in the Administrative template files delivered with for Windows.

Submit and view feedback for This product This page. View all page feedback. In this article. Prevent users from seeing or interacting with the Microsoft Defender Antivirus user interface. Together, these antivirus features protect you against spyware and can deliver fixes for malware issues via the cloud.

If you don't see these options on your screen, they may be hidden. Complete the following steps to make them visible. Still need help? Contact your support person.