Configuring Windows Defender advanced settings from Group Policy


i attempting configure windows defender advanced settings group policy in windows 2008 r2/windows 7 environment. far have following of administrative template settings configured:

    • check new signatures before scheduled scans: enabled
    • configure microsoft spynet reporting: disabled
    • turn off real-time monitoring: disabled
    • turn off windows defender: disabled
    • turn on definition updates through both wsus , microsoft malware protection center: enabled
    • turn on definition updates through both wsus , windows update: enabled (for redundancy)

    i've begun testing policy against windows 7 virtual machine , far has enabled windows defender , several optimal default settings. however, there 2 settings under "advanced" tab in program options want enable group policy, do not enable default:

    1. scan e-mail
    2. scan removable drives

i can't seem find guidance on net on how enable these 2 advanced settings through group policy. suppose manually walk around several hundred computers , enable i'd prefer not :)

all can find advanced guidance in regard microsoft here: http://support.microsoft.com/kb/927367 , doesn't answer questions.

or input appreciated!

hi,

posting in microsoft technet forums.

far know, these 2 settings cannot configured through group policy. however, suggest ask in our group policy forum precise answer.

group policy

http://social.technet.microsoft.com/forums/en/winservergp/threads

have nice day.

regards

kevin


Windows Server  >  Security



Comments

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2