Reply to thread

Message

<blockquote data-quote="oldschool" data-source="post: 823849" data-attributes="member: 71262">[USER=63857]@SearchLight[/USER] [USER=43687]@uduoix[/USER]See especially last two paragraphs from ConfigureDefender user guide:HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Group Policy settings can override but do not change native Windows Defender settings. The native settings are automatically recovered when removing Group Policy settings. The ConfigureDefender utility removes the settings made via direct registry editing under the policy key: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender This is required because those settings would override ConfigureDefender settings.The ConfigureDefender utility may be used on all Windows 10 versions. But, on Windows Professional and Enterprise editions it will only work if your Administrator has not applied Defender policies by using another management tool, for example, Group Policy Management Console. These policies are set to &quot;Not configured&quot; by default. If they have been changed by Administrator, thenthey should be reset to &quot;Not configured&quot;. Group Policy settings may be found in Group Policy Management Console: Computer Configuration &gt; Policies &gt; Administrative Templates &gt; Windows Components &gt; Windows Defender Antivirus The settings under the tabs: MAPS, MpEngine, Real-time Protection, Reporting Scan, Spynet, and Windows Defender Exploit Guard should be examined.Please note: Group Policy Refresh feature will override ConfigureDefender settings if Defender Group Policy settings are not reset to &quot;Not configured&quot;! ConfigureDefender should not be used to configure the settings, alongside other management tools deployed in Enterprises, like Intune or MDM CSPs.</blockquote>

[QUOTE="oldschool, post: 823849, member: 71262"] [USER=63857]@SearchLight[/USER] [USER=43687]@uduoix[/USER] See especially last two paragraphs from ConfigureDefender user guide: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Group Policy settings can override but do not change native Windows Defender settings. The native settings are automatically recovered when removing Group Policy settings. The ConfigureDefender utility removes the settings made via direct registry editing under the policy key: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender This is required because those settings would override ConfigureDefender settings. The ConfigureDefender utility may be used on all Windows 10 versions. But, on Windows Professional and Enterprise editions it will only work if your Administrator has not applied Defender policies by using another management tool, for example, Group Policy Management Console. These policies are set to "Not configured" by default. If they have been changed by Administrator, thenthey should be reset to "Not configured". Group Policy settings may be found in Group Policy Management Console: Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Defender Antivirus The settings under the tabs: MAPS, MpEngine, Real-time Protection, Reporting Scan, Spynet, and Windows Defender Exploit Guard should be examined. Please note: Group Policy Refresh feature will override ConfigureDefender settings if Defender Group Policy settings are not reset to "Not configured"! ConfigureDefender should not be used to configure the settings, alongside other management tools deployed in Enterprises, like Intune or MDM CSPs. [/QUOTE]

Verification