Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

MSFT Windows Server 2025 v2506 - Defender Antivirus
Data collected on: 6/20/2025 5:24:20 AM |

General
Details

Domain | security.local
Owner | SECURITY\Domain Admins
Created | 12/5/2024 8:46:50 PM
Modified | 6/5/2025 12:01:20 PM
User Revisions | 1 (AD), 1 (SYSVOL)
Computer Revisions | 18 (AD), 18 (SYSVOL)
Unique ID | {AB7F5E75-2737-4AA3-B1C2-33E7CE062DA8}
GPO Status | User settings disabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
None

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No
SECURITY\Domain Admins | Edit settings, delete, modify security | No
SECURITY\Enterprise Admins | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
Windows Components/Microsoft Defender Antivirus

Policy | Setting | Comment
--- | --- | ---
Configure detection for potentially unwanted applications | Enabled |
Policy | Setting | Comment
Control whether or not exclusions are visible to Local Admins | Enabled |
Select the channel for Microsoft Defender daily security intelligence updates | Enabled |
Select the channel for Microsoft Defender daily security intelligence updates: | Current Channel (Broad)
Policy | Setting | Comment
Select the channel for Microsoft Defender monthly engine updates | Enabled |
Select the channel for Microsoft Defender monthly engine updates: | Current Channel (Broad)
Policy | Setting | Comment
Select the channel for Microsoft Defender monthly platform updates | Enabled |
Select the channel for Microsoft Defender monthly platform updates: | Current Channel (Broad)

Windows Components/Microsoft Defender Antivirus/MAPS

Policy | Setting | Comment
--- | --- | ---
Configure the 'Block at First Sight' feature | Enabled |
Join Microsoft MAPS | Enabled |
Join Microsoft MAPS | Advanced MAPS
Policy | Setting | Comment
Send file samples when further analysis is required | Enabled |
Send file samples when further analysis is required |

Windows Components/Microsoft Defender Antivirus/Microsoft Defender Exploit Guard/Attack Surface Reduction

Policy | Setting | Comment
--- | --- | ---
Configure Attack Surface Reduction rules | Enabled |
Set the state for each ASR rule: |
--- | ---
5beb7efe-fd9a-4556-801d-275e5ffc04cc | 1
d3e037e1-3eb8-44c8-a917-57927947596d | 1
9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2 | 1
b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4 | 1
c1db55ab-c21a-4637-bb3f-a12568109d35 | 1
e6db77e5-3df2-4cf1-b95a-636979351e5b | 1
56a863a9-875e-4185-98a7-b882c64b5ce5 | 1
a8f5898e-1dc8-49a9-9878-85004b8a61e6 | 1

Windows Components/Microsoft Defender Antivirus/Microsoft Defender Exploit Guard/Network Protection

Policy | Setting | Comment
--- | --- | ---
This settings controls whether Network Protection is allowed to be configured into block or audit mode on Windows Server. | Enabled |

Windows Components/Microsoft Defender Antivirus/MpEngine

Policy | Setting | Comment
--- | --- | ---
Select cloud protection level | Enabled |
Select cloud blocking level | High blocking level

Windows Components/Microsoft Defender Antivirus/Real-time Protection

Policy | Setting | Comment
--- | --- | ---
Configure real-time protection and Security Intelligence Updates during OOBE | Enabled |
Scan all downloaded files and attachments | Enabled |
Turn off real-time protection | Disabled |
Turn on behavior monitoring | Enabled |
Turn on script scanning | Enabled |

Windows Components/Microsoft Defender Antivirus/Reporting

Policy | Setting | Comment
--- | --- | ---
Configure whether to report Dynamic Signature dropped events | Enabled |

Windows Components/Microsoft Defender Antivirus/Scan

Policy | Setting | Comment
--- | --- | ---
Scan excluded files and directories during quick scans | Enabled |
Policy | Setting | Comment
Scan removable drives | Enabled |

User Configuration (Disabled)
No settings defined.