ADMX Viewer
Microsoft.Policies.WebThreatDefense• Machine

Notify Malicious

This policy setting determines whether Enhanced Phishing Protection in Microsoft Defender SmartScreen warns your users if they type their work or school password into one of the following malicious scenarios: into a reported phishing site, into a Microsoft login URL with an invalid certificate, or into an application connecting to either a reported phishing site or a Microsoft login URL with an invalid certificate. If you enable this policy setting, Enhanced Phishing Protection in Microsoft Defender SmartScreen warns your users if they type their work or school password into one of the malicious scenarios described above and encourages them to change their password. If you disable or don’t configure this policy setting, Enhanced Phishing Protection in Microsoft Defender SmartScreen will not warn your users if they type their work or school password into one of the malicious scenarios described above.

Policy Details

Policy Name
NotifyMalicious
Registry Key
Software\Policies\Microsoft\Windows\WTDS\Components
Value Name
NotifyMalicious
Supported On
At least Windows 11 Version 22H2
OMA-URI (CSP)
WebThreatDefense/NotifyMalicious
OS Build Version:10.0.22621
CSP Version:11.0
Conflict Resolution:HighestValueMostSecure
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us