Advice Request Is there a way to set Microsoft Defender to scan "only on execution"?

[RoboMan]

Many antivirus and suites have the option to choose when to scan a file (real time protection module), on access, on execution, on write, etc.

Is there a way to configure this with Defender through the "hidden settings"? I mean by group policies, powershell, etc.

Thanks.

 

[ForgottenSeer 85179]

You mean Scan on Demand instead of Scan on Access?
This is only possible with disabling Realtime-Protection.

But i wouldn't recommend this

 

[Kongo]

You mean Scan on Demand instead of Scan on Access?
This is only possible with disabling Realtime-Protection.

But i wouldn't recommend this

No he means on execution as he said . MD scans files when downloaded, moved etc. and he wants it to only scan files when executed.

 

[ForgottenSeer 85179]

No he means on execution as he said . MD scans files when downloaded, moved etc. and he wants it to only scan files when executed.

Damn. I should go to bed

Well, MD also scan on execution.

 

[Kongo]

Damn. I should go to bed

Well, MD also scan on execution.

It does, but he wants it to scan on execution only. Probably for performance reasons.

 

[Lenny_Fox]

When you have a Windows PRO or higher you can set it to scan only incoming files. This means the cache will be kept and files will be scanned only once 'on access' when written.

 

[RoboMan]

When you have a Windows PRO or higher you can set it to scan only incoming files. This means the cache will be kept and files will be scanned only once 'on access' when written.

How can I achieve this?

 

[WhiteMouse]

I think he meant this setting?

 

[Lenny_Fox]

@robboman like @WhiteMouse posted via group policy (gpedit.msc)

 

[RoboMan]

Thx