ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Configure local setting override to turn on real-time protection

This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.

Policy Details

Policy Name
RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring
Registry Key
Software\Policies\Microsoft\Windows Defender\Real-Time Protection
Value Name
LocalSettingOverrideDisableRealtimeMonitoring
Supported On
At least Windows Server 2012, Windows 8 or Windows RT
OMA-URI (CSP)
ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring
OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us