ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Prevent users and apps from accessing dangerous websites

Enable or disable Microsoft Defender Exploit Guard network protection to prevent employees from using any application to access dangerous domains that may host phishing scams, exploit-hosting sites, and other malicious content on the Internet. Enabled: Specify the mode in the Options section: -Block: Users and applications will not be able to access dangerous domains -Audit Mode: Users and applications can connect to dangerous domains, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs. Disabled: Users and applications will not be blocked from connecting to dangerous domains. Not configured: Same as Disabled.

Policy Details

Policy Name
ExploitGuard_EnableNetworkProtection
Registry Key
Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection
Value Name
EnableNetworkProtection
Supported On
At least Windows Server 2016, Windows 10 Version 1709
Available Languages
en-us

Configuration Elements

ExploitGuard_EnableNetworkProtection

Type: enum

Allowed Values
  • 0 Disable (Default)
  • 1 Block
  • 2 Audit Mode