Policy
Monitor file and program activity on your computer
This policy setting allows you to configure monitoring for file and program activity. If you enable or do not configure this setting, monitoring for file and program activity will be enabled. If you disable this setting, monitoring for file and program activity will be disabled.
PackMicrosoft Windows
CategoryWindows Components / Microsoft Defender Antivirus / Real-time Protection
Policy ID
929bbfe77f9bInternal name
RealtimeProtection_DisableOnAccessProtectionRegistry
Copy registry mappings
HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableOnAccessProtection (enabled) = 0
HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableOnAccessProtection (disabled) = 1Policy notes
This policy setting allows you to configure monitoring for file and program activity. If you enable or do not configure this setting, monitoring for file and program activity will be enabled. If you disable this setting, monitoring for file and program activity will be disabled.
Related policies
Configure local setting override for monitoring file and program activity on your computerConfigure local setting override for monitoring for incoming and outgoing file activityConfigure local setting override for scanning all downloaded files and attachmentsConfigure local setting override for turn on behavior monitoringConfigure local setting override to turn on real-time protectionConfigure monitoring for incoming and outgoing file and program activityConfigure performance mode status