Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
MSFT Windows Server 2025 v2506 - Defender Antivirus
Data collected on: 6/20/2025 5:24:20 AM
General
Details
Domainsecurity.local
OwnerSECURITY\Domain Admins
Created12/5/2024 8:46:50 PM
Modified6/5/2025 12:01:20 PM
User Revisions1 (AD), 1 (SYSVOL)
Computer Revisions18 (AD), 18 (SYSVOL)
Unique ID{AB7F5E75-2737-4AA3-B1C2-33E7CE062DA8}
GPO StatusUser settings disabled
Links
LocationEnforcedLink StatusPath
None

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
NT AUTHORITY\Authenticated Users
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
NT AUTHORITY\Authenticated UsersRead (from Security Filtering)No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
SECURITY\Domain AdminsEdit settings, delete, modify securityNo
SECURITY\Enterprise AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
Windows Components/Microsoft Defender Antivirus
PolicySettingComment
Configure detection for potentially unwanted applicationsEnabled
 
PolicySettingComment
Control whether or not exclusions are visible to Local AdminsEnabled
Select the channel for Microsoft Defender daily security intelligence updatesEnabled
Select the channel for Microsoft Defender daily security intelligence updates:Current Channel (Broad)
PolicySettingComment
Select the channel for Microsoft Defender monthly engine updatesEnabled
Select the channel for Microsoft Defender monthly engine updates:Current Channel (Broad)
PolicySettingComment
Select the channel for Microsoft Defender monthly platform updatesEnabled
Select the channel for Microsoft Defender monthly platform updates:Current Channel (Broad)
Windows Components/Microsoft Defender Antivirus/MAPS
PolicySettingComment
Configure the 'Block at First Sight' featureEnabled
Join Microsoft MAPSEnabled
Join Microsoft MAPSAdvanced MAPS
PolicySettingComment
Send file samples when further analysis is requiredEnabled
Send file samples when further analysis is required 
Windows Components/Microsoft Defender Antivirus/Microsoft Defender Exploit Guard/Attack Surface Reduction
PolicySettingComment
Configure Attack Surface Reduction rulesEnabled
Set the state for each ASR rule: 
5beb7efe-fd9a-4556-801d-275e5ffc04cc1
d3e037e1-3eb8-44c8-a917-57927947596d1
9e6c4e1f-7d60-472f-ba1a-a39ef669e4b21
b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba41
c1db55ab-c21a-4637-bb3f-a12568109d351
e6db77e5-3df2-4cf1-b95a-636979351e5b1
56a863a9-875e-4185-98a7-b882c64b5ce51
a8f5898e-1dc8-49a9-9878-85004b8a61e61
Windows Components/Microsoft Defender Antivirus/Microsoft Defender Exploit Guard/Network Protection
PolicySettingComment
This settings controls whether Network Protection is allowed to be configured into block or audit mode on Windows Server.Enabled
Windows Components/Microsoft Defender Antivirus/MpEngine
PolicySettingComment
Select cloud protection levelEnabled
Select cloud blocking levelHigh blocking level
Windows Components/Microsoft Defender Antivirus/Real-time Protection
PolicySettingComment
Configure real-time protection and Security Intelligence Updates during OOBEEnabled
Scan all downloaded files and attachmentsEnabled
Turn off real-time protectionDisabled
Turn on behavior monitoringEnabled
Turn on script scanningEnabled
Windows Components/Microsoft Defender Antivirus/Reporting
PolicySettingComment
Configure whether to report Dynamic Signature dropped eventsEnabled
Windows Components/Microsoft Defender Antivirus/Scan
PolicySettingComment
Scan excluded files and directories during quick scansEnabled
 
PolicySettingComment
Scan removable drivesEnabled
User Configuration (Disabled)
No settings defined.