Prevent users from modifying settings


Prevent users from making changes to the Exploit protection settings area in Windows Security.

Enabled:
Local users can not make changes in the Exploit protection settings area.

Disabled:
Local users are allowed to make changes in the Exploit protection settings area.

Not configured:
Same as Disabled.

Supported on: At least Windows Server, Windows 10 Version 1709

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection
Value NameDisallowExploitProtectionOverride
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

windowsdefendersecuritycenter.admx

Administrative Templates (Computers)

Administrative Templates (Users)