Normal
When I recall right (at least I thought I have read that, so apologize when wrong) you used to set software restriction policies and defender settings through Group Policy. In your current setup it is not mentioned, so either I am wrong or you have not mentioned that anymore?
