Policy

Configure detection for potentially unwanted applications

Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. Enabled: Specify the mode in the Options section: -Block: Potentially unwanted software will be blocked. -Audit Mode: Potentially unwanted software will not be blocked, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs. Disabled: Potentially unwanted software will not be blocked. Not configured: Same as Disabled.

Policy
Pack Microsoft Windows
Category Windows Components / Microsoft Defender Antivirus
Policy ID e8d8ad2ca611
Internal name Root_PUAProtection

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows Defender\PUAProtection

Policy notes

Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer. Enabled: Specify the mode in the Options section: -Block: Potentially unwanted software will be blocked. -Audit Mode: Potentially unwanted software will not be blocked, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs. Disabled: Potentially unwanted software will not be blocked. Not configured: Same as Disabled.

Related policies

Allow antimalware service to remain running alwaysAllow antimalware service to startup with normal priorityConfigure local administrator merge behavior for listsConfigure scheduled task times randomization windowControl whether exclusions are visible to local usersControl whether or not exclusions are visible to Local AdminsDefine addresses to bypass proxy server