ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Configure detection for potentially unwanted applications

Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. Enabled: Specify the mode in the Options section: -Block: Potentially unwanted software will be blocked. -Audit Mode: Potentially unwanted software will not be blocked, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs. Disabled: Potentially unwanted software will not be blocked. Not configured: Same as Disabled.

Policy Details

Policy Name
Root_PUAProtection
Registry Key
Software\Policies\Microsoft\Windows Defender
Value Name
PUAProtection
Supported On
At least Windows Server 2016, Windows 10 Version 1607
Available Languages
en-us

Configuration Elements

Root_PUAProtection

Type: enum

Allowed Values
  • 0 Disable (Default)
  • 1 Block
  • 2 Audit Mode