Configure detection for potentially unwanted applications


Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer.

Enabled:
Specify the mode in the Options section:
-Block: Potentially unwanted software will be blocked.
-Audit Mode: Potentially unwanted software will not be blocked, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs.

Disabled:
Potentially unwanted software will not be blocked.

Not configured:
Same as Disabled.

Supported on: At least Windows Server, Windows 10 Version 1607

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows Defender
Value NamePUAProtection
Value TypeREG_DWORD
Enabled Value1
Disabled Value0




  1. Disable (Default)
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows Defender
    Value NamePUAProtection
    Value TypeREG_DWORD
    Value0
  2. Block
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows Defender
    Value NamePUAProtection
    Value TypeREG_DWORD
    Value1
  3. Audit Mode
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows Defender
    Value NamePUAProtection
    Value TypeREG_DWORD
    Value2


windowsdefender.admx

Administrative Templates (Computers)

Administrative Templates (Users)