Policy

Turn on behavior monitoring

This policy setting allows you to configure behavior monitoring. If you enable or do not configure this setting, behavior monitoring will be enabled. If you disable this setting, behavior monitoring will be disabled.

Policy
PackMicrosoft Windows
CategoryWindows Components / Microsoft Defender Antivirus / Real-time Protection
Policy IDa9d10c249e07
Internal nameRealtimeProtection_DisableBehaviorMonitoring

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableBehaviorMonitoring (enabled) = 0
HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableBehaviorMonitoring (disabled) = 1

Policy notes

This policy setting allows you to configure behavior monitoring. If you enable or do not configure this setting, behavior monitoring will be enabled. If you disable this setting, behavior monitoring will be disabled.

Related policies

Configure local setting override for monitoring file and program activity on your computerConfigure local setting override for monitoring for incoming and outgoing file activityConfigure local setting override for scanning all downloaded files and attachmentsConfigure local setting override for turn on behavior monitoringConfigure local setting override to turn on real-time protectionConfigure monitoring for incoming and outgoing file and program activityConfigure performance mode status