Category: At least Windows Server 2012, Windows 8 or Windows RT

This policy setting allows you to configure the maximum percentage CPU utilization permitted during a scan. Valid values for this setting are a percentage represented by the integers 5 to 100. A value of 0 indicates that there should be no throttling of CPU utilization. The default value is 50. If you enable this setting CPU utilization will not exceed the percentage specified. If you disable or do not configure this setting CPU utilization will not exceed the default value.

This policy setting allows you to configure scans for malicious software and unwanted software in archive files such as . ZIP or . CAB files. If you enable or do not configure this setting archive files will be scanned. If you disable this setting archive files will not be scanned.

This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. If you enable this setting catch-up scans for scheduled full scans will be turned on. If a computer is offline for two consecutive scheduled scans a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured there will be no catch-up scan run. If you disable or do not configure this setting catch-up scans for scheduled full scans will be turned off.

This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time. If you enable this setting catch-up scans for scheduled quick scans will be turned on. If a computer is offline for two consecutive scheduled scans a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured there will be no catch-up scan run. If you disable or do not configure this setting catch-up scans for scheduled quick scans will be turned off.

This policy setting configures the time in minutes before a detection in the “completed” state moves to the “cleared” state.

This policy setting configures a local override for the configuration of scanning for all downloaded files and attachments. This setting can only be set by Group Policy. If you enable this setting the local preference setting will take priority over Group Policy. If you disable or do not configure this setting Group Policy will take priority over the local preference setting.

This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only be set by Group Policy. If you enable this setting the local preference setting will take priority over Group Policy. If you disable or do not configure this setting Group Policy will take priority over the local preference setting.

This policy setting configures a local override for the configuration of monitoring for incoming and outgoing file activity. This setting can only be set by Group Policy. If you enable this setting the local preference setting will take priority over Group Policy. If you disable or do not configure this setting Group Policy will take priority over the local preference setting.

This policy setting allows you to configure monitoring for incoming and outgoing files without having to turn off monitoring entirely. It is recommended for use on servers where there is a lot of incoming and outgoing file activity but for performance reasons need to have scanning disabled for a particular scan direction. The appropriate configuration should be evaluated based on the server role. Note that this configuration is only honored for NTFS volumes. For any other file system type full monitoring of file and program activity will be present on those volumes. The options for this setting are mutually exclusive:0 = Scan incoming and outgoing files (default)1 = Scan incoming files only2 = Scan outgoing files onlyAny other value or if the value does not exist resolves to the default (0). If you enable this setting the specified type of monitoring will be enabled. If you disable or do not configure this setting monitoring for incoming and outgoing files will be enabled.

This policy setting configures a local override for the configuration of the time to run a scheduled full scan to complete remediation. This setting can only be set by Group Policy. If you enable this setting the local preference setting will take priority over Group Policy. If you disable or do not configure this setting Group Policy will take priority over the local preference setting.