ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Turn on raw volume write notifications

This policy setting controls whether raw volume write notifications are sent to behavior monitoring. If you enable or do not configure this setting, raw write notifications will be enabled. If you disable this setting, raw write notifications be disabled.

Policy Details

Policy Name
RealtimeProtection_DisableRawWriteNotification
Registry Key
Software\Policies\Microsoft\Windows Defender\Real-Time Protection
Value Name
DisableRawWriteNotification
Supported On
At least Windows Server 2012, Windows 8 or Windows RT
OMA-URI (CSP)
ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableRawWriteNotification
OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Policy State Values
Enabled: 0
Disabled: 1
Available Languages
en-us