Turn off real-time protection

This policy setting turns off real-time protection prompts for known malware detection. Windows Defender alerts you when malware or potentially unwanted software attempts to install itself or to run on your computer. If you enable this policy setting Windows Defender will not prompt users to take actions on malware detections. If you disable or do not configure this policy setting Windows Defender will prompt users to take actions on malware detections.

Turn on process scanning whenever real-time protection is enabled

This policy setting allows you to configure process scanning when real-time protection is turned on. This helps to catch malware which could start when real-time protection is turned off. If you enable or do not configure this setting a process scan will be initiated when real-time protection is turned on. If you disable this setting a process scan will not be initiated when real-time protection is turned on.

Configure local setting override for monitoring file and program activity on your computer

This policy setting configures a local override for the configuration of monitoring for file and program activity on your computer. This setting can only be set by Group Policy. If you enable this setting the local preference setting will take priority over Group Policy. If you disable or do not configure this setting Group Policy will take priority over the local preference setting.

Configure local setting override to turn off Intrusion Prevention System

This policy setting configures a local override for the configuration of network protection against exploits of known vulnerabilities. This setting can only be set by Group Policy. If you enable this setting the local preference setting will take priority over Group Policy. If you disable or do not configure this setting Group Policy will take priority over the local preference setting.