ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Turn on behavior monitoring

This policy setting allows you to configure behavior monitoring. If you enable or do not configure this setting, behavior monitoring will be enabled. If you disable this setting, behavior monitoring will be disabled.

Policy Details

Policy Name
RealtimeProtection_DisableBehaviorMonitoring
Registry Key
Software\Policies\Microsoft\Windows Defender\Real-Time Protection
Value Name
DisableBehaviorMonitoring
Supported On
At least Windows Server 2012, Windows 8 or Windows RT
OMA-URI (CSP)
ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableBehaviorMonitoring
OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Policy State Values
Enabled: 0
Disabled: 1
Available Languages
en-us