Turn on process scanning whenever real-time protection is enabled
This policy setting allows you to configure process scanning when real-time protection is turned on. This helps to catch malware which could start when real-time protection is turned off. If you enable or do not configure this setting a process scan will be initiated when real-time protection is turned on. If you disable this setting a process scan will not be initiated when real-time protection is turned on.
Turn off real-time protection
This policy setting turns off real-time protection prompts for known malware detection. Windows Defender alerts you when malware or potentially unwanted software attempts to install itself or to run on your computer. If you enable this policy setting Windows Defender will not prompt users to take actions on malware detections. If you disable or do not configure this policy setting Windows Defender will prompt users to take actions on malware detections.
Turn on raw volume write notifications
This policy setting controls whether raw volume write notifications are sent to behavior monitoring. If you enable or do not configure this setting raw write notifications will be enabled. If you disable this setting raw write notifications be disabled.
Monitor file and program activity on your computer
This policy setting allows you to configure monitoring for file and program activity. If you enable or do not configure this setting monitoring for file and program activity will be enabled. If you disable this setting monitoring for file and program activity will be disabled.
Scan all downloaded files and attachments
This policy setting allows you to configure scanning for all downloaded files and attachments. If you enable or do not configure this setting scanning for all downloaded files and attachments will be enabled. If you disable this setting scanning for all downloaded files and attachments will be disabled.
Turn on network protection against exploits of known vulnerabilities
This policy setting allows you to configure network protection against exploits of known vulnerabilities. If you enable or do not configure this setting the network protection will be enabled. If you disable this setting the network protection will be disabled.
Turn on Information Protection Control
This policy setting allows you to configure Information Protection Control (IPC). If you enable this setting IPC will be enabled. If you disable or do not configure this setting IPC will be disabled.
Turn on behavior monitoring
This policy setting allows you to configure behavior monitoring. If you enable or do not configure this setting behavior monitoring will be enabled. If you disable this setting behavior monitoring will be disabled.
Configure removal of items from Quarantine folder
This policy setting defines the number of days items should be kept in the Quarantine folder before being removed. If you enable this setting items will be removed from the Quarantine folder after the number of days specified. If you disable or do not configure this setting items will be kept in the quarantine folder indefinitely and will not be automatically removed.
Configure local setting override for the removal of items from Quarantine folder
This policy setting configures a local override for the configuration of the number of days items should be kept in the Quarantine folder before being removed. This setting can only be set by Group Policy. If you enable this setting the local preference setting will take priority over Group Policy. If you disable or do not configure this setting Group Policy will take priority over the local preference setting.