Forums
New posts
News feed
Latest activity
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
MalwareTips Giveaways
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blogs
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Forums
Software
Security Software
Microsoft
ConfigureDefender utility for Windows 10
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Message
<blockquote data-quote="Andy Ful" data-source="post: 705526" data-attributes="member: 32260"><p><strong><span style="font-size: 18px">ConfigureDefender utility for Windows 10.</span></strong></p><p></p><p>Developer website:</p><p><strong>[URL unfurl="true"]https://github.com/AndyFul/ConfigureDefender[/URL]</strong></p><p></p><p>Softpedia:</p><p><a href="https://www.softpedia.com/get/PORTABLE-SOFTWARE/System/System-Enhancements/ConfigureDefender.shtml">Download ConfigureDefender 3.0.0.1 (softpedia.com)</a></p><p></p><p>Hard_Configurator website (thanks to [USER=64646]@askalan[/USER]):</p><p><strong>[URL unfurl="true"]https://hard-configurator.com[/URL]</strong></p><p></p><p>ConfigureDefender utility is a GUI application to view and configure important Defender settings on Windows 10. It mostly uses PowerShell cmdlets (with a few exceptions). Furthermore, the user can apply one of three predefined settings: Default, High, and Max. <strong>Applying settings require restarting the computer.</strong></p><p><strong><span style="color: rgb(0, 168, 133)">Recommended for most users are High settings</span></strong>. The Max protection is mostly set to block anything suspicious via Attack Surface Reduction, Controlled Folder Access, SmartScreen (set to block), and 0-tolerance cloud level - also Defender Security Center is hidden.</p><p>ConfigureDefender utility is a part of the Hard_Configurator project, but it can be used as a standalone application.</p><p>.</p><p><strong>Some important remarks on the possible ways used to configure Defender (for advanced users).</strong></p><p></p><p></p><p>.</p><p>Windows Defender settings are stored in the Windows Registry and most of them are not available from Windows Defender Security Center. They can be managed via:</p><p>a) Group Policy Management Console (gpedit.msc, not available in Windows Home edition),</p><p>b) Direct Registry editing (manual, *.reg files, scripts).</p><p>c) PowerShell cmdlets (set-mppreference, add-mppreference, remove-mppreference, only Windows 8.1+).</p><p>.</p><p>Normally, Windows Defender stores most settings under the key (owned by SYSTEM):</p><p><span style="color: #0059b3"><strong>HKLM\SOFTWARE\Microsoft\Windows Defender</strong></span></p><p>They can be changed when using Defender Security Center or PowerShell cmdlets.</p><p>.</p><p>Administrators can use Group Policy Management Console to override those settings. Group Policy settings are stored under another key (owned by ADMINISTRATORS):</p><p><span style="color: #336600"><strong>HKLM\SOFTWARE\Policies\Microsoft\Windows Defender</strong></span></p><p>Group Policy settings do not delete the normal Defender settings.</p><p>.</p><p>Direct Registry editing is usually made, under the second key (the first requires System Rights).</p><p>Applying Defender settings by Direct Registry editing under the key:</p><p><strong><span style="color: #336600">HKLM\SOFTWARE\Policies\Microsoft\Windows Defender</span></strong></p><p>is not recommended, on Windows editions which support Group Policy Management Console (for example PRO and Enterprise editions), because of some cons:</p><p>a) Those settings are not recognized by the Group Policy Management Console.</p><p>b) They can temporarily overwrite the Group Policy Management Console setup in the Registry, because they share the same Registry keys. Those changes are not permanent, because Group Policy configuration is not overwritten.</p><p>c) After some hours, those settings are automatically and silently back-overwritten by the Group Policy Refresh feature.</p><p>d) Those settings cannot be changed via the Defender Security Center (or PowerShell cmdlets), even if they are visible there (like folders and applications related to Controlled Folder Access).</p><p>.</p><p>In Windows Home edition, one can configure Defender settings (outside of the Defender Security Center), when using PowerShell cmdlets or via the manual Registry editing. But, the most important settings are available only on Windows 10, so ConfigureDefender supports only Windows 10.</p><p>This may confuse some users, so ConfigureDefender utility can remove the settings made via Direct Registry editing under the key: <span style="color: #336600"><strong>HKLM\SOFTWARE\Policies\Microsoft\Windows Defender</strong></span> .</p><p>That is required because those settings would override ConfigureDefender settings.</p><p>.</p><p>ConfigureDefender utility may be used also on Windows 10 Professional and Enterprise editions, if Administrator did not apply Defender policies via Group Policy Management Console. Normally all those policies are set to 'Not configured'. So, if Administrator applied Defender policies, then they must be set first to 'Not configured' before using ConfigureDefender.</p><p>.</p><p>Those settings can be found in the Group Policy Management Console:</p><p>Computer configuration >> Policies >> Administrative templates >> Windows components >> Windows Defender Antivirus.</p><p>The tabs: MAPS, MpEngine, Real-time Protection, Reporting, Scan, Spynet, and Windows Defender Exploit Guard, should be examined.</p><p>.</p><p><strong>The below list shows which settings are available in ConfigureDefender for different Windows versions:</strong></p><p>.</p><p>At least Windows 10:</p><p>Real-time Monitoring, Behavior Monitoring, Scan all downloaded files and attachments, Reporting Level (MAPS membership level), Average CPU Load while scanning, Automatic Sample Submission, PUA Protection, Cloud Protection Level (Default), Cloud Check Time Limit.</p><p></p><p>At least Windows 10, version 1607 (Anniversary Update):</p><p>Block At First Seen.</p><p></p><p>At least Windows 10, version 1703 (Anniversary Update):</p><p>Cloud Protection Level (High level for Windows Pro and Enterprise), Cloud Check Time Limit (Extended to 60s).</p><p></p><p>At least Windows 10, version 1709 (Creators Fall Update):</p><p>Attack Surface Reduction, Cloud Protection Level (extended Levels for Windows Pro and Enterprise), Controlled Folder Access, Network Protection.</p><p></p><p>Some reviews:</p><p><a href="https://www.bleepingcomputer.com/news/microsoft/windows-10-defenders-hidden-features-revealed-by-this-free-tool/">Windows 10 Defender's hidden features revealed by this free tool (bleepingcomputer.com)</a></p><p><a href="https://www.ghacks.net/2020/05/09/windows-defender-configuration-tool-configuredefender-3-0-0-0-released/">Windows Defender configuration tool ConfigureDefender 3.0.0.0 released - gHacks Tech News</a></p><p></p><p>Post updated in November 2020.</p></blockquote><p></p>
[QUOTE="Andy Ful, post: 705526, member: 32260"] [B][SIZE=5]ConfigureDefender utility for Windows 10.[/SIZE][/B] Developer website: [B][URL unfurl="true"]https://github.com/AndyFul/ConfigureDefender[/URL][/B] Softpedia: [URL='https://www.softpedia.com/get/PORTABLE-SOFTWARE/System/System-Enhancements/ConfigureDefender.shtml']Download ConfigureDefender 3.0.0.1 (softpedia.com)[/URL] Hard_Configurator website (thanks to [USER=64646]@askalan[/USER]): [B][URL unfurl="true"]https://hard-configurator.com[/URL][/B] ConfigureDefender utility is a GUI application to view and configure important Defender settings on Windows 10. It mostly uses PowerShell cmdlets (with a few exceptions). Furthermore, the user can apply one of three predefined settings: Default, High, and Max. [B]Applying settings require restarting the computer. [COLOR=rgb(0, 168, 133)]Recommended for most users are High settings[/COLOR][/B]. The Max protection is mostly set to block anything suspicious via Attack Surface Reduction, Controlled Folder Access, SmartScreen (set to block), and 0-tolerance cloud level - also Defender Security Center is hidden. ConfigureDefender utility is a part of the Hard_Configurator project, but it can be used as a standalone application. . [B]Some important remarks on the possible ways used to configure Defender (for advanced users).[/B] . Windows Defender settings are stored in the Windows Registry and most of them are not available from Windows Defender Security Center. They can be managed via: a) Group Policy Management Console (gpedit.msc, not available in Windows Home edition), b) Direct Registry editing (manual, *.reg files, scripts). c) PowerShell cmdlets (set-mppreference, add-mppreference, remove-mppreference, only Windows 8.1+). . Normally, Windows Defender stores most settings under the key (owned by SYSTEM): [COLOR=#0059b3][B]HKLM\SOFTWARE\Microsoft\Windows Defender[/B][/COLOR] They can be changed when using Defender Security Center or PowerShell cmdlets. . Administrators can use Group Policy Management Console to override those settings. Group Policy settings are stored under another key (owned by ADMINISTRATORS): [COLOR=#336600][B]HKLM\SOFTWARE\Policies\Microsoft\Windows Defender[/B][/COLOR] Group Policy settings do not delete the normal Defender settings. . Direct Registry editing is usually made, under the second key (the first requires System Rights). Applying Defender settings by Direct Registry editing under the key: [B][COLOR=#336600]HKLM\SOFTWARE\Policies\Microsoft\Windows Defender[/COLOR][/B] is not recommended, on Windows editions which support Group Policy Management Console (for example PRO and Enterprise editions), because of some cons: a) Those settings are not recognized by the Group Policy Management Console. b) They can temporarily overwrite the Group Policy Management Console setup in the Registry, because they share the same Registry keys. Those changes are not permanent, because Group Policy configuration is not overwritten. c) After some hours, those settings are automatically and silently back-overwritten by the Group Policy Refresh feature. d) Those settings cannot be changed via the Defender Security Center (or PowerShell cmdlets), even if they are visible there (like folders and applications related to Controlled Folder Access). . In Windows Home edition, one can configure Defender settings (outside of the Defender Security Center), when using PowerShell cmdlets or via the manual Registry editing. But, the most important settings are available only on Windows 10, so ConfigureDefender supports only Windows 10. This may confuse some users, so ConfigureDefender utility can remove the settings made via Direct Registry editing under the key: [COLOR=#336600][B]HKLM\SOFTWARE\Policies\Microsoft\Windows Defender[/B][/COLOR] . That is required because those settings would override ConfigureDefender settings. . ConfigureDefender utility may be used also on Windows 10 Professional and Enterprise editions, if Administrator did not apply Defender policies via Group Policy Management Console. Normally all those policies are set to 'Not configured'. So, if Administrator applied Defender policies, then they must be set first to 'Not configured' before using ConfigureDefender. . Those settings can be found in the Group Policy Management Console: Computer configuration >> Policies >> Administrative templates >> Windows components >> Windows Defender Antivirus. The tabs: MAPS, MpEngine, Real-time Protection, Reporting, Scan, Spynet, and Windows Defender Exploit Guard, should be examined. . [B]The below list shows which settings are available in ConfigureDefender for different Windows versions:[/B] . At least Windows 10: Real-time Monitoring, Behavior Monitoring, Scan all downloaded files and attachments, Reporting Level (MAPS membership level), Average CPU Load while scanning, Automatic Sample Submission, PUA Protection, Cloud Protection Level (Default), Cloud Check Time Limit. At least Windows 10, version 1607 (Anniversary Update): Block At First Seen. At least Windows 10, version 1703 (Anniversary Update): Cloud Protection Level (High level for Windows Pro and Enterprise), Cloud Check Time Limit (Extended to 60s). At least Windows 10, version 1709 (Creators Fall Update): Attack Surface Reduction, Cloud Protection Level (extended Levels for Windows Pro and Enterprise), Controlled Folder Access, Network Protection. Some reviews: [URL='https://www.bleepingcomputer.com/news/microsoft/windows-10-defenders-hidden-features-revealed-by-this-free-tool/']Windows 10 Defender's hidden features revealed by this free tool (bleepingcomputer.com)[/URL] [URL='https://www.ghacks.net/2020/05/09/windows-defender-configuration-tool-configuredefender-3-0-0-0-released/']Windows Defender configuration tool ConfigureDefender 3.0.0.0 released - gHacks Tech News[/URL] Post updated in November 2020. [/QUOTE]
Insert quotes…
Verification
Post reply
Top
