Policy

Turn on process scanning whenever real-time protection is enabled

This policy setting allows you to configure process scanning when real-time protection is turned on. This helps to catch malware which could start when real-time protection is turned off. If you enable or do not configure this setting, a process scan will be initiated when real-time protection is turned on. If you disable this setting, a process scan will not be initiated when real-time protection is turned on.

Policy
Pack Microsoft Windows
Category Windows Components / Microsoft Defender Antivirus / Real-time Protection
Policy ID bf4eb618044f
Internal name RealtimeProtection_DisableScanOnRealtimeEnable

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableScanOnRealtimeEnable (enabled) = 0
HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableScanOnRealtimeEnable (disabled) = 1

Policy notes

This policy setting allows you to configure process scanning when real-time protection is turned on. This helps to catch malware which could start when real-time protection is turned off. If you enable or do not configure this setting, a process scan will be initiated when real-time protection is turned on. If you disable this setting, a process scan will not be initiated when real-time protection is turned on.

Related policies

Configure local setting override for monitoring file and program activity on your computerConfigure local setting override for monitoring for incoming and outgoing file activityConfigure local setting override for scanning all downloaded files and attachmentsConfigure local setting override for turn on behavior monitoringConfigure local setting override to turn on real-time protectionConfigure monitoring for incoming and outgoing file and program activityConfigure performance mode status