ADMX Viewer
Microsoft.Policies.WindowsDefender• Machine

Specify threat alert levels at which default action should not be taken when detected

This policy setting allows you to customize which automatic remediation action will be taken for each threat alert level.Threat alert levels should be added under the Options for this setting. Each entry must be listed as a name value pair. The name defines a threat alert level. The value contains the action ID for the remediation action that should be taken. Valid threat alert levels are: 1 = Low 2 = Medium 4 = High 5 = Severe Valid remediation action values are: 2 = Quarantine 3 = Remove 6 = Ignore

Policy Details

Policy Name
Threats_ThreatSeverityDefaultAction
Registry Key
Software\Policies\Microsoft\Windows Defender\Threats
Value Name
Threats_ThreatSeverityDefaultAction
Supported On
At least Windows Server 2012, Windows 8 or Windows RT
Available Languages
en-us

Configuration Elements

Specify threat alert levels at which default action should not be taken when detected

Type: list

Explicit values: true
Additive: true