Deploy windows defender gpo

Turn off Windows Defender: We can set this policy to disabled, or leave it as not configured to have Windows Defender on and scanning for malware. As the policy is not configured by default, Windows Defender is enabled. Exclusions: We can define file extension, path, or process exclusions here.

This will prevent the specified file, path, or process from being scanned by Windows Defender on all machines where the policy is applicable to. By default items will be stored indefinitely and are not automatically removed. Specify the day of week to run a scheduled scan: This policy allows us to set a custom day of the week to run the scans.

Specify the time of day to run a scheduled scan: This policy allows us to set a custom time to run the scans. Summary As shown we can configure Windows Defender using group policy, allowing us to customize the way Defender operates within our Windows domain. Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Please rate your experience Yes No. Any additional feedback? Note We recommend using Microsoft Endpoint Manager to manage your organization's threat protection features for devices also referred to as endpoints.

Note If you're using the new, unified Microsoft Defender for Endpoint solution for Windows Server R2 and , please ensure you are using the latest ADMX files in your central store to get access to the correct Microsoft Defender for Endpoint policy options. Submit and view feedback for This product This page.

View all page feedback. In this article. As an Amazon Associate, I earn from qualifying purchases. Windows Related Tutorial:. On this page, we offer quick access to a list of tutorials related to Windows. List of Tutorials. On the domain controller, open the group policy management tool. Right-click your new Group Policy Object and select the Edit option. Copy to Clipboard. Edit the configuration item named Path exclusions.

Enable this configuration and enter a list of directories to be excluded. The directories will be excluded from the Windows Defender real-time protection. To save the group policy configuration, you need to close the Group Policy editor.

Tutorial - Applying the GPO to add path exclusion. After applying the GPO you need to wait for 10 or 20 minutes. During this time the GPO will be replicated to other domain controllers.

In our example, we excluded a directory from the Windows Defender real-time protection. Related Posts. January 4th, September 2nd, August 2nd,