ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Configure local setting override for turn on behavior monitoring

This policy setting configures a local override for the configuration of behavior monitoring. This setting can only be set by Group Policy. If you enable this setting, the local preference setting will take priority over Group Policy. If you disable or do not configure this setting, Group Policy will take priority over the local preference setting.

Policy Details

Policy Name
RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring
Registry Key
Software\Policies\Microsoft\Windows Defender\Real-Time Protection
Value Name
LocalSettingOverrideDisableBehaviorMonitoring
Supported On
At least Windows Server 2012, Windows 8 or Windows RT
OMA-URI (CSP)
ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring
OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us