Policy

Allow real-time security intelligence updates based on reports to Microsoft MAPS

This policy setting allows you to enable real-time security intelligence updates in response to reports sent to Microsoft MAPS. If the service reports a file as an unknown and Microsoft MAPS finds that the latest security intelligence update has security intelligence for a threat involving that file, the service will receive all of the latest security intelligence for that threat immediately. You must have configured your computer to join Microsoft MAPS for this functionality to work. If you enable or do not configure this setting, real-time security intelligence updates will be enabled. If you disable this setting, real-time security intelligence updates will disabled.

Policy
Pack Microsoft Windows
Category Windows Components / Microsoft Defender Antivirus / Security Intelligence Updates
Policy ID 1625e8b1d5bb
Internal name SignatureUpdate_RealtimeSignatureDelivery

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates\RealtimeSignatureDelivery (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates\RealtimeSignatureDelivery (disabled) = 0

Policy notes

This policy setting allows you to enable real-time security intelligence updates in response to reports sent to Microsoft MAPS. If the service reports a file as an unknown and Microsoft MAPS finds that the latest security intelligence update has security intelligence for a threat involving that file, the service will receive all of the latest security intelligence for that threat immediately. You must have configured your computer to join Microsoft MAPS for this functionality to work. If you enable or do not configure this setting, real-time security intelligence updates will be enabled. If you disable this setting, real-time security intelligence updates will disabled.

Related policies

Allow notifications to disable security intelligence based reports to Microsoft MAPSAllow security intelligence updates from Microsoft UpdateAllow security intelligence updates when running on battery powerAllows Microsoft Defender Antivirus to update and communicate over a metered connection.Check for the latest virus and spyware security intelligence on startupConfigure security intelligence updates according to the scheduler for VDI clients.Define file shares for downloading security intelligence updates