diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md
index 639e9356c0..d30cc12164 100644
--- a/windows/client-management/mdm/TOC.md
+++ b/windows/client-management/mdm/TOC.md
@@ -202,6 +202,7 @@
#### [ADMX_Kerberos](policy-csp-admx-kerberos.md)
#### [ADMX_LanmanServer](policy-csp-admx-lanmanserver.md)
#### [ADMX_LinkLayerTopologyDiscovery](policy-csp-admx-linklayertopologydiscovery.md)
+#### [ADMX_MicrosoftDefenderAntivirus](policy-csp-admx-microsoftdefenderantivirus.md)
#### [ADMX_MMC](policy-csp-admx-mmc.md)
#### [ADMX_MMCSnapins](policy-csp-admx-mmcsnapins.md)
#### [ADMX_MSAPolicy](policy-csp-admx-msapolicy.md)
diff --git a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
index b04813d319..f2b1c25bd5 100644
--- a/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
+++ b/windows/client-management/mdm/policies-in-policy-csp-admx-backed.md
@@ -232,6 +232,99 @@ ms.date: 10/08/2020
- [ADMX_LanmanServer/Pol_HonorCipherSuiteOrder](./policy-csp-admx-lanmanserver.md#admx-lanmanserver-pol-honorciphersuiteorder)
- [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableLLTDIO](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablelltdio)
- [ADMX_LinkLayerTopologyDiscovery/LLTD_EnableRspndr](./policy-csp-admx-linklayertopologydiscovery.md#admx-linklayertopologydiscovery-lltd-enablerspndr)
+- [ADMX_MicrosoftDefenderAntivirus/AllowFastServiceStartup](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-allowfastservicestartup)
+- [ADMX_MicrosoftDefenderAntivirus/DisableAntiSpywareDefender](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableantispywaredefender)
+- [ADMX_MicrosoftDefenderAntivirus/DisableAutoExclusions](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableautoexclusions)
+- [ADMX_MicrosoftDefenderAntivirus/DisableBlockAtFirstSeen](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableblockatfirstseen)
+- [ADMX_MicrosoftDefenderAntivirus/DisableLocalAdminMerge](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disablelocaladminmerge)
+- [ADMX_MicrosoftDefenderAntivirus/DisableRealtimeMonitoring](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disablerealtimemonitoring)
+- [ADMX_MicrosoftDefenderAntivirus/DisableRoutinelyTakingAction](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-disableroutinelytakingaction)
+- [ADMX_MicrosoftDefenderAntivirus/Exclusions_Extensions](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exclusions-extensions)
+- [ADMX_MicrosoftDefenderAntivirus/Exclusions_Paths](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exclusions-paths)
+- [ADMX_MicrosoftDefenderAntivirus/Exclusions_Processes](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exclusions-processes)
+- [ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_ASROnlyExclusions](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exploitguard-asr-asronlyexclusions)
+- [ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_Rules](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exploitguard-asr-rules)
+- [ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_AllowedApplications](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exploitguard-controlledfolderaccess-allowedapplications)
+- [ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_ProtectedFolders](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-exploitguard-controlledfolderaccess-protectedfolders)
+- [ADMX_MicrosoftDefenderAntivirus/MpEngine_EnableFileHashComputation](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-mpengine-enablefilehashcomputation)
+- [ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_DisableSignatureRetirement](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-nis-consumers-ips-disablesignatureretirement)
+- [ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-nis-consumers-ips-sku-differentiation-signature-set-guid)
+- [ADMX_MicrosoftDefenderAntivirus/Nis_DisableProtocolRecognition](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-nis-disableprotocolrecognition)
+- [ADMX_MicrosoftDefenderAntivirus/ProxyBypass](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-proxybypass)
+- [ADMX_MicrosoftDefenderAntivirus/ProxyPacUrl](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-proxypacurl)
+- [ADMX_MicrosoftDefenderAntivirus/ProxyServer](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-proxyserver)
+- [ADMX_MicrosoftDefenderAntivirus/Quarantine_LocalSettingOverridePurgeItemsAfterDelay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-quarantine-localsettingoverridepurgeitemsafterdelay)
+- [ADMX_MicrosoftDefenderAntivirus/Quarantine_PurgeItemsAfterDelay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-quarantine-purgeitemsafterdelay)
+- [ADMX_MicrosoftDefenderAntivirus/RandomizeScheduleTaskTimes](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-randomizescheduletasktimes)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableBehaviorMonitoring](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disablebehaviormonitoring)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableIOAVProtection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disableioavprotection)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableOnAccessProtection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disableonaccessprotection)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableRawWriteNotification](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disablerawwritenotification)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableScanOnRealtimeEnable](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-disablescanonrealtimeenable)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_IOAVMaxSize](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-ioavmaxsize)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisablebehaviormonitoring)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisableioavprotection)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisableonaccessprotection)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverridedisablerealtimemonitoring)
+- [ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-realtimeprotection-localsettingoverriderealtimescandirection)
+- [ADMX_MicrosoftDefenderAntivirus/Remediation_LocalSettingOverrideScan_ScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-remediation-localsettingoverridescan-scheduletime)
+- [ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleDay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-remediation-scan-scheduleday)
+- [ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-remediation-scan-scheduletime)
+- [ADMX_MicrosoftDefenderAntivirus/Reporting_AdditionalActionTimeout](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-additionalactiontimeout)
+- [ADMX_MicrosoftDefenderAntivirus/Reporting_CriticalFailureTimeout](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-criticalfailuretimeout)
+- [ADMX_MicrosoftDefenderAntivirus/Reporting_DisableEnhancedNotifications](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-disableenhancednotifications)
+- [ADMX_MicrosoftDefenderAntivirus/Reporting_DisablegenericrePorts](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-disablegenericreports)
+- [ADMX_MicrosoftDefenderAntivirus/Reporting_NonCriticalTimeout](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-noncriticaltimeout)
+- [ADMX_MicrosoftDefenderAntivirus/Reporting_RecentlyCleanedTimeout](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-recentlycleanedtimeout)
+- [ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingComponents](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-wpptracingcomponents)
+- [ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingLevel](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-reporting-wpptracinglevel)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_AllowPause](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-allowpause)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxDepth](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-archivemaxdepth)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxSize](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-archivemaxsize)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableArchiveScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablearchivescanning)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableEmailScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disableemailscanning)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableHeuristics](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disableheuristics)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_DisablePackedExeScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablepackedexescanning)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableRemovableDriveScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disableremovabledrivescanning)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableReparsePointScanning](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablereparsepointscanning)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableRestorePoint](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablerestorepoint)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningMappedNetworkDrivesForFullScan](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablescanningmappednetworkdrivesforfullscan)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningNetworkFiles](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-disablescanningnetworkfiles)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideAvgCPULoadFactor](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverrideavgcpuloadfactor)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScanParameters](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverridescanparameters)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleDay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverridescheduleday)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleQuickScantime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverrideschedulequickscantime)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-localsettingoverridescheduletime)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_LowCpuPriority](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-lowcpupriority)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_MissedScheduledScanCountBeforeCatchup](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-missedscheduledscancountbeforecatchup)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_PurgeItemsAfterDelay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-purgeitemsafterdelay)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_QuickScanInterval](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-quickscaninterval)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_ScanOnlyIfIdle](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-scanonlyifidle)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleDay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-scheduleday)
+- [ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-scan-scheduletime)
+- [ADMX_MicrosoftDefenderAntivirus/ServiceKeepAlive](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-servicekeepalive)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ASSignatureDue](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-assignaturedue)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_AVSignatureDue](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-avsignaturedue)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DefinitionUpdateFileSharesSources](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-definitionupdatefilesharessources)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScanOnUpdate](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-disablescanonupdate)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScheduledSignatureUpdateonBattery](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-disablescheduledsignatureupdateonbattery)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableUpdateOnStartupWithoutEngine](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-disableupdateonstartupwithoutengine)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_FallbackOrder](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-fallbackorder)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ForceUpdateFromMU](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-forceupdatefrommu)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_RealtimeSignatureDelivery](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-realtimesignaturedelivery)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleDay](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-scheduleday)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleTime](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-scheduletime)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SharedSignaturesLocation](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-sharedsignatureslocation)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureDisableNotification](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-signaturedisablenotification)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureUpdateCatchupInterval](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-signatureupdatecatchupinterval)
+- [ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_UpdateOnStartup](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-signatureupdate-updateonstartup)
+- [ADMX_MicrosoftDefenderAntivirus/SpynetReporting](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-spynetreporting)
+- [ADMX_MicrosoftDefenderAntivirus/Spynet_LocalSettingOverrideSpynetReporting](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-spynet-localsettingoverridespynetreporting)
+- [ADMX_MicrosoftDefenderAntivirus/Threats_ThreatIdDefaultAction](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-threats-threatiddefaultaction)
+- [ADMX_MicrosoftDefenderAntivirus/UX_Configuration_CustomDefaultActionToastString](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-ux-configuration-customdefaultactiontoaststring)
+- [ADMX_MicrosoftDefenderAntivirus/UX_Configuration_Notification_Suppress](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-ux-configuration-notification-suppress)
+- [ADMX_MicrosoftDefenderAntivirus/UX_Configuration_SuppressRebootNotification](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-ux-configuration-suppressrebootnotification)
+- [ADMX_MicrosoftDefenderAntivirus/UX_Configuration_UILockdown](./policy-csp-admx-microsoftdefenderantivirus.md#admx-microsoftdefenderantivirus-ux-configuration-uilockdown)
- [ADMX_MMC/MMC_ActiveXControl](./policy-csp-admx-mmc.md#admx-mmc-mmc-activexcontrol)
- [ADMX_MMC/MMC_ExtendView](./policy-csp-admx-mmc.md#admx-mmc-mmc-extendview)
- [ADMX_MMC/MMC_LinkToWeb](./policy-csp-admx-mmc.md#admx-mmc-mmc-linktoweb)
diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md
index 8a993d4783..1e3e29a308 100644
--- a/windows/client-management/mdm/policy-configuration-service-provider.md
+++ b/windows/client-management/mdm/policy-configuration-service-provider.md
@@ -940,6 +940,290 @@ The following diagram shows the Policy configuration service provider in tree fo
+### ADMX_MicrosoftDefenderAntivirus policies
+
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/AllowFastServiceStartup
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/DisableAntiSpywareDefender
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/DisableAutoExclusions
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/DisableBlockAtFirstSeen
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/DisableLocalAdminMerge
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/DisableRealtimeMonitoring
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/DisableRoutinelyTakingAction
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Exclusions_Extensions
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Exclusions_Paths
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Exclusions_Processes
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_ASROnlyExclusions
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_Rules
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_AllowedApplications
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_ProtectedFolders
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/MpEngine_EnableFileHashComputation
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_DisableSignatureRetirement
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Nis_DisableProtocolRecognition
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/ProxyBypass
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/ProxyPacUrl
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/ProxyServer
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Quarantine_LocalSettingOverridePurgeItemsAfterDelay
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Quarantine_PurgeItemsAfterDelay
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RandomizeScheduleTaskTimes
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableBehaviorMonitoring
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableIOAVProtection
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableOnAccessProtection
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableRawWriteNotification
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableScanOnRealtimeEnable
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_IOAVMaxSize
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Remediation_LocalSettingOverrideScan_ScheduleTime
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleDay
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleTime
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Reporting_AdditionalActionTimeout
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Reporting_CriticalFailureTimeout
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Reporting_DisableEnhancedNotifications
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Reporting_DisablegenericrePorts
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Reporting_NonCriticalTimeout
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Reporting_RecentlyCleanedTimeout
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingComponents
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingLevel
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_AllowPause
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxDepth
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxSize
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableArchiveScanning
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableEmailScanning
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableHeuristics
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisablePackedExeScanning
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableRemovableDriveScanning
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableReparsePointScanning
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableRestorePoint
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningMappedNetworkDrivesForFullScan
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningNetworkFiles
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideAvgCPULoadFactor
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScanParameters
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleDay
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleQuickScantime
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleTime
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_LowCpuPriority
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_MissedScheduledScanCountBeforeCatchup
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_PurgeItemsAfterDelay
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_QuickScanInterval
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_ScanOnlyIfIdle
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleDay
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleTime
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/ServiceKeepAlive
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ASSignatureDue
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_AVSignatureDue
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DefinitionUpdateFileSharesSources
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScanOnUpdate
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScheduledSignatureUpdateonBattery
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableUpdateOnStartupWithoutEngine
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_FallbackOrder
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ForceUpdateFromMU
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_RealtimeSignatureDelivery
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleDay
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleTime
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SharedSignaturesLocation
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureDisableNotification
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureUpdateCatchupInterval
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_UpdateOnStartup
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/SpynetReporting
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Spynet_LocalSettingOverrideSpynetReporting
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/Threats_ThreatIdDefaultAction
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/UX_Configuration_CustomDefaultActionToastString
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/UX_Configuration_Notification_Suppress
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/UX_Configuration_SuppressRebootNotification
+
+ -
+ ADMX_MicrosoftDefenderAntivirus/UX_Configuration_UILockdown
+
+
+
### ADMX_MMC policies
-
diff --git a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md
similarity index 78%
rename from windows/client-management/mdm/policy-csp-admx-windowsdefender.md
rename to windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md
index 5e550c9817..a582499424 100644
--- a/windows/client-management/mdm/policy-csp-admx-windowsdefender.md
+++ b/windows/client-management/mdm/policy-csp-admx-microsoftdefenderantivirus.md
@@ -1,344 +1,305 @@
---
-title: Policy CSP - ADMX_WindowsDefender
-description: Policy CSP - ADMX_WindowsDefender
+title: Policy CSP - ADMX_MicrosoftDefenderAntivirus
+description: Policy CSP - ADMX_MicrosoftDefenderAntivirus
ms.author: dansimp
ms.localizationpriority: medium
ms.topic: article
ms.prod: w10
ms.technology: windows
author: manikadhiman
-ms.date: 08/13/2020
+ms.date: 12/02/2020
ms.reviewer:
manager: dansimp
---
-# Policy CSP - ADMX_WindowsDefender
+# Policy CSP - ADMX_MicrosoftDefenderAntivirus
> [!WARNING]
> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
-## ADMX_WindowsDefender policies
+## ADMX_MicrosoftDefenderAntivirus policies
-
- ADMX_WindowsDefender/AllowFastServiceStartup
+ ADMX_MicrosoftDefenderAntivirus/AllowFastServiceStartup
-
- ADMX_WindowsDefender/CheckForSignaturesBeforeRunningScan
+ ADMX_MicrosoftDefenderAntivirus/DisableAntiSpywareDefender
-
- ADMX_WindowsDefender/DisableAntiSpywareDefender
+ ADMX_MicrosoftDefenderAntivirus/DisableAutoExclusions
-
- ADMX_WindowsDefender/DisableAutoExclusions
+ ADMX_MicrosoftDefenderAntivirus/DisableBlockAtFirstSeen
-
- ADMX_WindowsDefender/DisableBlockAtFirstSeen
+ ADMX_MicrosoftDefenderAntivirus/DisableLocalAdminMerge
-
- ADMX_WindowsDefender/DisableLocalAdminMerge
+ ADMX_MicrosoftDefenderAntivirus/DisableRealtimeMonitoring
-
- ADMX_WindowsDefender/DisableRealtimeMonitoring
+ ADMX_MicrosoftDefenderAntivirus/DisableRoutinelyTakingAction
-
- ADMX_WindowsDefender/DisableRoutinelyTakingAction
+ ADMX_MicrosoftDefenderAntivirus/Exclusions_Extensions
-
- ADMX_WindowsDefender/Exclusions_Extensions
+ ADMX_MicrosoftDefenderAntivirus/Exclusions_Paths
-
- ADMX_WindowsDefender/Exclusions_Paths
+ ADMX_MicrosoftDefenderAntivirus/Exclusions_Processes
-
- ADMX_WindowsDefender/Exclusions_Processes
+ ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_ASROnlyExclusions
-
- ADMX_WindowsDefender/ExploitGuard_ASR_ASROnlyExclusions
+ ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_Rules
-
- ADMX_WindowsDefender/ExploitGuard_ASR_Rules
+ ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_AllowedApplications
-
- ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_AllowedApplications
+ ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_ProtectedFolders
-
- ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess
+ ADMX_MicrosoftDefenderAntivirus/MpEngine_EnableFileHashComputation
-
- ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_ProtectedFolders
+ ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_DisableSignatureRetirement
-
- ADMX_WindowsDefender/ExploitGuard_EnableNetworkProtection
+ ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid
-
- ADMX_WindowsDefender/MpEngine_EnableFileHashComputation
+ ADMX_MicrosoftDefenderAntivirus/Nis_DisableProtocolRecognition
-
- ADMX_WindowsDefender/Nis_Consumers_IPS_DisableSignatureRetirement
+ ADMX_MicrosoftDefenderAntivirus/ProxyBypass
-
- ADMX_WindowsDefender/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid
+ ADMX_MicrosoftDefenderAntivirus/ProxyPacUrl
-
- ADMX_WindowsDefender/Nis_DisableProtocolRecognition
+ ADMX_MicrosoftDefenderAntivirus/ProxyServer
-
- ADMX_WindowsDefender/ProxyBypass
+ ADMX_MicrosoftDefenderAntivirus/Quarantine_LocalSettingOverridePurgeItemsAfterDelay
-
- ADMX_WindowsDefender/ProxyPacUrl
+ ADMX_MicrosoftDefenderAntivirus/Quarantine_PurgeItemsAfterDelay
-
- ADMX_WindowsDefender/ProxyServer
+ ADMX_MicrosoftDefenderAntivirus/RandomizeScheduleTaskTimes
-
- ADMX_WindowsDefender/Quarantine_LocalSettingOverridePurgeItemsAfterDelay
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableBehaviorMonitoring
-
- ADMX_WindowsDefender/Quarantine_PurgeItemsAfterDelay
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableIOAVProtection
-
- ADMX_WindowsDefender/RandomizeScheduleTaskTimes
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableOnAccessProtection
-
- ADMX_WindowsDefender/RealtimeProtection_DisableBehaviorMonitoring
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableRawWriteNotification
-
- ADMX_WindowsDefender/RealtimeProtection_DisableIOAVProtection
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableScanOnRealtimeEnable
-
- ADMX_WindowsDefender/RealtimeProtection_DisableOnAccessProtection
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_IOAVMaxSize
-
- ADMX_WindowsDefender/RealtimeProtection_DisableRawWriteNotification
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring
-
- ADMX_WindowsDefender/RealtimeProtection_DisableScanOnRealtimeEnable
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection
-
- ADMX_WindowsDefender/RealtimeProtection_IOAVMaxSize
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection
-
- ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring
-
- ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection
+ ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection
-
- ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection
+ ADMX_MicrosoftDefenderAntivirus/Remediation_LocalSettingOverrideScan_ScheduleTime
-
- ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring
+ ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleDay
-
- ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection
+ ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleTime
-
- ADMX_WindowsDefender/RealtimeProtection_RealtimeScanDirection
+ ADMX_MicrosoftDefenderAntivirus/Reporting_AdditionalActionTimeout
-
- ADMX_WindowsDefender/Remediation_LocalSettingOverrideScan_ScheduleTime
+ ADMX_MicrosoftDefenderAntivirus/Reporting_CriticalFailureTimeout
-
- ADMX_WindowsDefender/Remediation_Scan_ScheduleDay
+ ADMX_MicrosoftDefenderAntivirus/Reporting_DisableEnhancedNotifications
-
- ADMX_WindowsDefender/Remediation_Scan_ScheduleTime
+ ADMX_MicrosoftDefenderAntivirus/Reporting_DisablegenericrePorts
-
- ADMX_WindowsDefender/Reporting_AdditionalActionTimeout
+ ADMX_MicrosoftDefenderAntivirus/Reporting_NonCriticalTimeout
-
- ADMX_WindowsDefender/Reporting_CriticalFailureTimeout
+ ADMX_MicrosoftDefenderAntivirus/Reporting_RecentlyCleanedTimeout
-
- ADMX_WindowsDefender/Reporting_DisableEnhancedNotifications
+ ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingComponents
-
- ADMX_WindowsDefender/Reporting_DisablegenericrePorts
+ ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingLevel
-
- ADMX_WindowsDefender/Reporting_NonCriticalTimeout
+ ADMX_MicrosoftDefenderAntivirus/Scan_AllowPause
-
- ADMX_WindowsDefender/Reporting_RecentlyCleanedTimeout
+ ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxDepth
-
- ADMX_WindowsDefender/Reporting_WppTracingComponents
+ ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxSize
-
- ADMX_WindowsDefender/Reporting_WppTracingLevel
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableArchiveScanning
-
- ADMX_WindowsDefender/Root_PUAProtection
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableEmailScanning
-
- ADMX_WindowsDefender/Scan_AllowPause
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableHeuristics
-
- ADMX_WindowsDefender/Scan_ArchiveMaxDepth
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisablePackedExeScanning
-
- ADMX_WindowsDefender/Scan_ArchiveMaxSize
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableRemovableDriveScanning
-
- ADMX_WindowsDefender/Scan_AvgCPULoadFactor
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableReparsePointScanning
-
- ADMX_WindowsDefender/Scan_DisableArchiveScanning
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableRestorePoint
-
- ADMX_WindowsDefender/Scan_DisableCatchupFullScan
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningMappedNetworkDrivesForFullScan
-
- ADMX_WindowsDefender/Scan_DisableCatchupQuickScan
+ ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningNetworkFiles
-
- ADMX_WindowsDefender/Scan_DisableEmailScanning
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideAvgCPULoadFactor
-
- ADMX_WindowsDefender/Scan_DisableHeuristics
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScanParameters
-
- ADMX_WindowsDefender/Scan_DisablePackedExeScanning
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleDay
-
- ADMX_WindowsDefender/Scan_DisableRemovableDriveScanning
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleQuickScantime
-
- ADMX_WindowsDefender/Scan_DisableReparsePointScanning
+ ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleTime
-
- ADMX_WindowsDefender/Scan_DisableRestorePoint
+ ADMX_MicrosoftDefenderAntivirus/Scan_LowCpuPriority
-
- ADMX_WindowsDefender/Scan_DisableScanningMappedNetworkDrivesForFullScan
+ ADMX_MicrosoftDefenderAntivirus/Scan_MissedScheduledScanCountBeforeCatchup
-
- ADMX_WindowsDefender/Scan_DisableScanningNetworkFiles
+ ADMX_MicrosoftDefenderAntivirus/Scan_PurgeItemsAfterDelay
-
- ADMX_WindowsDefender/Scan_LocalSettingOverrideAvgCPULoadFactor
+ ADMX_MicrosoftDefenderAntivirus/Scan_QuickScanInterval
-
- ADMX_WindowsDefender/Scan_LocalSettingOverrideScanParameters
+ ADMX_MicrosoftDefenderAntivirus/Scan_ScanOnlyIfIdle
-
- ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleDay
+ ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleDay
-
- ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleQuickScantime
+ ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleTime
-
- ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleTime
+ ADMX_MicrosoftDefenderAntivirus/ServiceKeepAlive
-
- ADMX_WindowsDefender/Scan_LowCpuPriority
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ASSignatureDue
-
- ADMX_WindowsDefender/Scan_MissedScheduledScanCountBeforeCatchup
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_AVSignatureDue
-
- ADMX_WindowsDefender/Scan_PurgeItemsAfterDelay
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DefinitionUpdateFileSharesSources
-
- ADMX_WindowsDefender/Scan_QuickScanInterval
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScanOnUpdate
-
- ADMX_WindowsDefender/Scan_ScanOnlyIfIdle
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScheduledSignatureUpdateonBattery
-
- ADMX_WindowsDefender/Scan_ScanParameters
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableUpdateOnStartupWithoutEngine
-
- ADMX_WindowsDefender/Scan_ScheduleDay
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_FallbackOrder
-
- ADMX_WindowsDefender/Scan_ScheduleQuickScantime
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ForceUpdateFromMU
-
- ADMX_WindowsDefender/Scan_ScheduleTime
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_RealtimeSignatureDelivery
-
- ADMX_WindowsDefender/ServiceKeepAlive
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleDay
-
- ADMX_WindowsDefender/SignatureUpdate_ASSignatureDue
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleTime
-
- ADMX_WindowsDefender/SignatureUpdate_AVSignatureDue
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SharedSignaturesLocation
-
- ADMX_WindowsDefender/SignatureUpdate_DefinitionUpdateFileSharesSources
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureDisableNotification
-
- ADMX_WindowsDefender/SignatureUpdate_DisableScanOnUpdate
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureUpdateCatchupInterval
-
- ADMX_WindowsDefender/SignatureUpdate_DisableScheduledSignatureUpdateonBattery
+ ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_UpdateOnStartup
-
- ADMX_WindowsDefender/SignatureUpdate_DisableUpdateOnStartupWithoutEngine
+ ADMX_MicrosoftDefenderAntivirus/SpynetReporting
-
- ADMX_WindowsDefender/SignatureUpdate_FallbackOrder
+ ADMX_MicrosoftDefenderAntivirus/Spynet_LocalSettingOverrideSpynetReporting
-
- ADMX_WindowsDefender/SignatureUpdate_ForceUpdateFromMU
+ ADMX_MicrosoftDefenderAntivirus/Threats_ThreatIdDefaultAction
-
- ADMX_WindowsDefender/SignatureUpdate_RealtimeSignatureDelivery
+ ADMX_MicrosoftDefenderAntivirus/UX_Configuration_CustomDefaultActionToastString
-
- ADMX_WindowsDefender/SignatureUpdate_ScheduleDay
+ ADMX_MicrosoftDefenderAntivirus/UX_Configuration_Notification_Suppress
-
- ADMX_WindowsDefender/SignatureUpdate_ScheduleTime
+ ADMX_MicrosoftDefenderAntivirus/UX_Configuration_SuppressRebootNotification
-
- ADMX_WindowsDefender/SignatureUpdate_SharedSignaturesLocation
-
- -
- ADMX_WindowsDefender/SignatureUpdate_SignatureDisableNotification
-
- -
- ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateCatchupInterval
-
- -
- ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateInterval
-
- -
- ADMX_WindowsDefender/SignatureUpdate_UpdateOnStartup
-
- -
- ADMX_WindowsDefender/SpynetReporting
-
- -
- ADMX_WindowsDefender/Spynet_LocalSettingOverrideSpynetReporting
-
- -
- ADMX_WindowsDefender/SubmitSamplesConsent
-
- -
- ADMX_WindowsDefender/Threats_ThreatIdDefaultAction
-
- -
- ADMX_WindowsDefender/Threats_ThreatSeverityDefaultAction
-
- -
- ADMX_WindowsDefender/UX_Configuration_CustomDefaultActionToastString
-
- -
- ADMX_WindowsDefender/UX_Configuration_Notification_Suppress
-
- -
- ADMX_WindowsDefender/UX_Configuration_SuppressRebootNotification
-
- -
- ADMX_WindowsDefender/UX_Configuration_UILockdown
+ ADMX_MicrosoftDefenderAntivirus/UX_Configuration_UILockdown
@@ -346,7 +307,7 @@ manager: dansimp
-**ADMX_WindowsDefender/AllowFastServiceStartup**
+**ADMX_MicrosoftDefenderAntivirus/AllowFastServiceStartup**
@@ -415,78 +376,7 @@ ADMX Info:
-**ADMX_WindowsDefender/CheckForSignaturesBeforeRunningScan**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
-  |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
-  |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to manage whether a check for new virus and spyware security intelligence will occur before running a scan.
-
-This setting applies to scheduled scans as well as the command line "mpcmdrun -SigUpdate", but it has no effect on scans initiated manually from the user interface.
-
-If you enable this setting, a check for new security intelligence will occur before running a scan.
-
-If you disable this setting or do not configure this setting, the scan will start using the existing security intelligence.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Check for the latest virus and spyware security intelligence before running a scheduled scan*
-- GP name: *CheckForSignaturesBeforeRunningScan*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Scan*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-
-**ADMX_WindowsDefender/DisableAntiSpywareDefender**
+**ADMX_MicrosoftDefenderAntivirus/DisableAntiSpywareDefender**
@@ -559,7 +449,7 @@ ADMX Info:
-**ADMX_WindowsDefender/DisableAutoExclusions**
+**ADMX_MicrosoftDefenderAntivirus/DisableAutoExclusions**
@@ -633,7 +523,7 @@ ADMX Info:
-**ADMX_WindowsDefender/DisableBlockAtFirstSeen**
+**ADMX_MicrosoftDefenderAntivirus/DisableBlockAtFirstSeen**
@@ -708,7 +598,7 @@ ADMX Info:
-**ADMX_WindowsDefender/DisableLocalAdminMerge**
+**ADMX_MicrosoftDefenderAntivirus/DisableLocalAdminMerge**
@@ -777,7 +667,7 @@ ADMX Info:
-**ADMX_WindowsDefender/DisableRealtimeMonitoring**
+**ADMX_MicrosoftDefenderAntivirus/DisableRealtimeMonitoring**
@@ -848,7 +738,7 @@ ADMX Info:
-**ADMX_WindowsDefender/DisableRoutinelyTakingAction**
+**ADMX_MicrosoftDefenderAntivirus/DisableRoutinelyTakingAction**
@@ -917,7 +807,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Exclusions_Extensions**
+**ADMX_MicrosoftDefenderAntivirus/Exclusions_Extensions**
@@ -982,7 +872,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Exclusions_Paths**
+**ADMX_MicrosoftDefenderAntivirus/Exclusions_Paths**
@@ -1049,7 +939,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Exclusions_Processes**
+**ADMX_MicrosoftDefenderAntivirus/Exclusions_Processes**
@@ -1114,7 +1004,7 @@ ADMX Info:
-**ADMX_WindowsDefender/ExploitGuard_ASR_ASROnlyExclusions**
+**ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_ASROnlyExclusions**
@@ -1194,7 +1084,7 @@ ADMX Info:
-**ADMX_WindowsDefender/ExploitGuard_ASR_Rules**
+**ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ASR_Rules**
@@ -1290,7 +1180,7 @@ ADMX Info:
-**ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_AllowedApplications**
+**ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_AllowedApplications**
@@ -1372,127 +1262,7 @@ ADMX Info:
-**ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. Enable or disable controlled folder access for untrusted applications. You can choose to block, audit, or allow attempts by untrusted apps to:
-
-- Modify or delete files in protected folders, such as the Documents folder
-- Write to disk sectors
-
-You can also choose to only block or audit writes to disk sectors while still allowing the modification or deletion of files in protected folders.
-
-Microsoft Defender Antivirus automatically determines which applications can be trusted. You can add additional trusted applications in the Configure allowed applications GP setting.
-Default system folders are automatically protected, but you can add folders in the Configure protected folders GP setting.
-
-Block:
-The following will be blocked:
-
-- Attempts by untrusted apps to modify or delete files in protected folders
-- Attempts by untrusted apps to write to disk sectors
-
-The Windows event log will record these blocks under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1123.
-
-Disabled:
-The following will not be blocked and will be allowed to run:
-
-- Attempts by untrusted apps to modify or delete files in protected folders
-- Attempts by untrusted apps to write to disk sectors
-
-These attempts will not be recorded in the Windows event log.
-
-Audit Mode:
-The following will not be blocked and will be allowed to run:
-
-- Attempts by untrusted apps to modify or delete files in protected folders
-- Attempts by untrusted apps to write to disk sectors
-
-The Windows event log will record these attempts under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1124.
-
-Block disk modification only:
-The following will be blocked:
-
-- Attempts by untrusted apps to write to disk sectors
-
-The Windows event log will record these attempts under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1123.
-
-The following will not be blocked and will be allowed to run:
-
-- Attempts by untrusted apps to modify or delete files in protected folders
-These attempts will not be recorded in the Windows event log.
-
-Audit disk modification only:
-The following will not be blocked and will be allowed to run:
-
-- Attempts by untrusted apps to write to disk sectors
-- Attempts by untrusted apps to modify or delete files in protected folders
-Only attempts to write to protected disk sectors will be recorded in the Windows event log (under Applications and Services Logs > Microsoft > Windows > Windows Defender > Operational > ID 1124).
-Attempts to modify or delete files in protected folders will not be recorded.
-
-Not configured:
-Same as Disabled.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Configure Controlled folder access*
-- GP name: *ExploitGuard_ControlledFolderAccess_EnableControlledFolderAccess*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Controlled Folder Access*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-
-**ADMX_WindowsDefender/ExploitGuard_ControlledFolderAccess_ProtectedFolders**
+**ADMX_MicrosoftDefenderAntivirus/ExploitGuard_ControlledFolderAccess_ProtectedFolders**
@@ -1575,84 +1345,7 @@ ADMX Info:
-**ADMX_WindowsDefender/ExploitGuard_EnableNetworkProtection**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. Enable or disable Microsoft Defender Exploit Guard network protection to prevent employees from using any application to access dangerous domains that may host phishing scams, exploit-hosting sites, and other malicious content on the Internet.
-
-Enabled:
-Specify the mode in the Options section:
-
-- Block: Users and applications will not be able to access dangerous domains
-- Audit Mode: Users and applications can connect to dangerous domains, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs.
-
-Disabled:
-Users and applications will not be blocked from connecting to dangerous domains.
-
-Not configured:
-Same as Disabled.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Prevent users and apps from accessing dangerous websites*
-- GP name: *ExploitGuard_EnableNetworkProtection*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Network Protection*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-
-**ADMX_WindowsDefender/MpEngine_EnableFileHashComputation**
+**ADMX_MicrosoftDefenderAntivirus/MpEngine_EnableFileHashComputation**
@@ -1726,7 +1419,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Nis_Consumers_IPS_DisableSignatureRetirement**
+**ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_DisableSignatureRetirement**
@@ -1795,7 +1488,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid**
+**ADMX_MicrosoftDefenderAntivirus/Nis_Consumers_IPS_sku_differentiation_Signature_Set_Guid**
@@ -1860,7 +1553,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Nis_DisableProtocolRecognition**
+**ADMX_MicrosoftDefenderAntivirus/Nis_DisableProtocolRecognition**
@@ -1929,7 +1622,7 @@ ADMX Info:
-**ADMX_WindowsDefender/ProxyBypass**
+**ADMX_MicrosoftDefenderAntivirus/ProxyBypass**
@@ -1998,7 +1691,7 @@ ADMX Info:
-**ADMX_WindowsDefender/ProxyPacUrl**
+**ADMX_MicrosoftDefenderAntivirus/ProxyPacUrl**
@@ -2073,7 +1766,7 @@ ADMX Info:
-**ADMX_WindowsDefender/ProxyServer**
+**ADMX_MicrosoftDefenderAntivirus/ProxyServer**
@@ -2148,7 +1841,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Quarantine_LocalSettingOverridePurgeItemsAfterDelay**
+**ADMX_MicrosoftDefenderAntivirus/Quarantine_LocalSettingOverridePurgeItemsAfterDelay**
@@ -2217,7 +1910,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Quarantine_PurgeItemsAfterDelay**
+**ADMX_MicrosoftDefenderAntivirus/Quarantine_PurgeItemsAfterDelay**
@@ -2286,7 +1979,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RandomizeScheduleTaskTimes**
+**ADMX_MicrosoftDefenderAntivirus/RandomizeScheduleTaskTimes**
@@ -2355,7 +2048,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_DisableBehaviorMonitoring**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableBehaviorMonitoring**
@@ -2424,7 +2117,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_DisableIOAVProtection**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableIOAVProtection**
@@ -2493,7 +2186,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_DisableOnAccessProtection**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableOnAccessProtection**
@@ -2562,7 +2255,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_DisableRawWriteNotification**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableRawWriteNotification**
@@ -2631,7 +2324,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_DisableScanOnRealtimeEnable**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_DisableScanOnRealtimeEnable**
@@ -2700,7 +2393,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_IOAVMaxSize**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_IOAVMaxSize**
@@ -2769,7 +2462,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableBehaviorMonitoring**
@@ -2838,7 +2531,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableIOAVProtection**
@@ -2907,7 +2600,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableOnAccessProtection**
@@ -2976,7 +2669,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideDisableRealtimeMonitoring**
@@ -3045,7 +2738,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection**
+**ADMX_MicrosoftDefenderAntivirus/RealtimeProtection_LocalSettingOverrideRealtimeScanDirection**
@@ -3114,86 +2807,7 @@ ADMX Info:
-**ADMX_WindowsDefender/RealtimeProtection_RealtimeScanDirection**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure monitoring for incoming and outgoing files, without having to turn off monitoring entirely. It is recommended for use on servers where there is a lot of incoming and outgoing file activity but for performance reasons need to have scanning disabled for a particular scan direction. The appropriate configuration should be evaluated based on the server role.
-
-Note that this configuration is only honored for NTFS volumes. For any other file system type, full monitoring of file and program activity will be present on those volumes.
-
-The options for this setting are mutually exclusive:
-
-- 0 = Scan incoming and outgoing files (default)
-- 1 = Scan incoming files only
-- 2 = Scan outgoing files only
-
-Any other value, or if the value does not exist, resolves to the default (0).
-
-If you enable this setting, the specified type of monitoring will be enabled.
-
-If you disable or do not configure this setting, monitoring for incoming and outgoing files will be enabled.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Configure monitoring for incoming and outgoing file and program activity*
-- GP name: *RealtimeProtection_RealtimeScanDirection*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Real-time Protection*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-
-**ADMX_WindowsDefender/Remediation_LocalSettingOverrideScan_ScheduleTime**
+**ADMX_MicrosoftDefenderAntivirus/Remediation_LocalSettingOverrideScan_ScheduleTime**
@@ -3262,7 +2876,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Remediation_Scan_ScheduleDay**
+**ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleDay**
@@ -3343,7 +2957,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Remediation_Scan_ScheduleTime**
+**ADMX_MicrosoftDefenderAntivirus/Remediation_Scan_ScheduleTime**
@@ -3412,7 +3026,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Reporting_AdditionalActionTimeout**
+**ADMX_MicrosoftDefenderAntivirus/Reporting_AdditionalActionTimeout**
@@ -3477,7 +3091,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Reporting_CriticalFailureTimeout**
+**ADMX_MicrosoftDefenderAntivirus/Reporting_CriticalFailureTimeout**
@@ -3542,7 +3156,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Reporting_DisableEnhancedNotifications**
+**ADMX_MicrosoftDefenderAntivirus/Reporting_DisableEnhancedNotifications**
@@ -3610,7 +3224,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Reporting_DisablegenericrePorts**
+**ADMX_MicrosoftDefenderAntivirus/Reporting_DisablegenericrePorts**
@@ -3679,7 +3293,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Reporting_NonCriticalTimeout**
+**ADMX_MicrosoftDefenderAntivirus/Reporting_NonCriticalTimeout**
@@ -3743,7 +3357,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Reporting_RecentlyCleanedTimeout**
+**ADMX_MicrosoftDefenderAntivirus/Reporting_RecentlyCleanedTimeout**
@@ -3808,7 +3422,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Reporting_WppTracingComponents**
+**ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingComponents**
@@ -3873,7 +3487,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Reporting_WppTracingLevel**
+**ADMX_MicrosoftDefenderAntivirus/Reporting_WppTracingLevel**
@@ -3945,84 +3559,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Root_PUAProtection**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. Enable or disable detection for potentially unwanted applications. You can choose to block, audit, or allow when potentially unwanted software is being downloaded or attempts to install itself on your computer.
-
-Enabled:
-Specify the mode in the Options section:
-
-- Block: Potentially unwanted software will be blocked.
-- Audit Mode: Potentially unwanted software will not be blocked, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs.
-
-Disabled:
-Potentially unwanted software will not be blocked.
-
-Not configured:
-Same as Disabled.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Configure detection for potentially unwanted applications*
-- GP name: *Root_PUAProtection*
-- GP path: *Windows Components\Microsoft Defender Antivirus*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-
-**ADMX_WindowsDefender/Scan_AllowPause**
+**ADMX_MicrosoftDefenderAntivirus/Scan_AllowPause**
@@ -4091,7 +3628,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_ArchiveMaxDepth**
+**ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxDepth**
@@ -4160,7 +3697,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_ArchiveMaxSize**
+**ADMX_MicrosoftDefenderAntivirus/Scan_ArchiveMaxSize**
@@ -4228,77 +3765,9 @@ ADMX Info:
-
-**ADMX_WindowsDefender/Scan_AvgCPULoadFactor**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure the maximum percentage CPU utilization permitted during a scan. Valid values for this setting are a percentage represented by the integers 5 to 100. A value of 0 indicates that there should be no throttling of CPU utilization. The default value is 50.
-
-If you enable this setting, CPU utilization will not exceed the percentage specified.
-
-If you disable or do not configure this setting, CPU utilization will not exceed the default value.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Specify the maximum percentage of CPU utilization during a scan*
-- GP name: *Scan_AvgCPULoadFactor*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Scan*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-**ADMX_WindowsDefender/Scan_DisableArchiveScanning**
+**ADMX_MicrosoftDefenderAntivirus/Scan_DisableArchiveScanning**
@@ -4367,145 +3836,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_DisableCatchupFullScan**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure catch-up scans for scheduled full scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
-
-If you enable this setting, catch-up scans for scheduled full scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run.
-
-If you disable or do not configure this setting, catch-up scans for scheduled full scans will be turned off.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Turn on catch-up full scan*
-- GP name: *Scan_DisableCatchupFullScan*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Scan*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-
-**ADMX_WindowsDefender/Scan_DisableCatchupQuickScan**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to configure catch-up scans for scheduled quick scans. A catch-up scan is a scan that is initiated because a regularly scheduled scan was missed. Usually these scheduled scans are missed because the computer was turned off at the scheduled time.
-
-If you enable this setting, catch-up scans for scheduled quick scans will be turned on. If a computer is offline for two consecutive scheduled scans, a catch-up scan is started the next time someone logs on to the computer. If there is no scheduled scan configured, there will be no catch-up scan run.
-
-If you disable or do not configure this setting, catch-up scans for scheduled quick scans will be turned off.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Turn on catch-up quick scan*
-- GP name: *Scan_DisableCatchupQuickScan*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Scan*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-
-**ADMX_WindowsDefender/Scan_DisableEmailScanning**
+**ADMX_MicrosoftDefenderAntivirus/Scan_DisableEmailScanning**
@@ -4574,7 +3905,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_DisableHeuristics**
+**ADMX_MicrosoftDefenderAntivirus/Scan_DisableHeuristics**
@@ -4643,7 +3974,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_DisablePackedExeScanning**
+**ADMX_MicrosoftDefenderAntivirus/Scan_DisablePackedExeScanning**
@@ -4712,7 +4043,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_DisableRemovableDriveScanning**
+**ADMX_MicrosoftDefenderAntivirus/Scan_DisableRemovableDriveScanning**
@@ -4781,7 +4112,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_DisableReparsePointScanning**
+**ADMX_MicrosoftDefenderAntivirus/Scan_DisableReparsePointScanning**
@@ -4850,7 +4181,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_DisableRestorePoint**
+**ADMX_MicrosoftDefenderAntivirus/Scan_DisableRestorePoint**
@@ -4918,7 +4249,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_DisableScanningMappedNetworkDrivesForFullScan**
+**ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningMappedNetworkDrivesForFullScan**
@@ -4987,7 +4318,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_DisableScanningNetworkFiles**
+**ADMX_MicrosoftDefenderAntivirus/Scan_DisableScanningNetworkFiles**
@@ -5056,7 +4387,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_LocalSettingOverrideAvgCPULoadFactor**
+**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideAvgCPULoadFactor**
@@ -5125,7 +4456,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_LocalSettingOverrideScanParameters**
+**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScanParameters**
@@ -5194,7 +4525,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleDay**
+**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleDay**
@@ -5263,7 +4594,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleQuickScantime**
+**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleQuickScantime**
@@ -5332,7 +4663,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_LocalSettingOverrideScheduleTime**
+**ADMX_MicrosoftDefenderAntivirus/Scan_LocalSettingOverrideScheduleTime**
@@ -5401,7 +4732,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_LowCpuPriority**
+**ADMX_MicrosoftDefenderAntivirus/Scan_LowCpuPriority**
@@ -5470,7 +4801,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_MissedScheduledScanCountBeforeCatchup**
+**ADMX_MicrosoftDefenderAntivirus/Scan_MissedScheduledScanCountBeforeCatchup**
@@ -5539,7 +4870,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_PurgeItemsAfterDelay**
+**ADMX_MicrosoftDefenderAntivirus/Scan_PurgeItemsAfterDelay**
@@ -5608,7 +4939,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_QuickScanInterval**
+**ADMX_MicrosoftDefenderAntivirus/Scan_QuickScanInterval**
@@ -5677,7 +5008,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_ScanOnlyIfIdle**
+**ADMX_MicrosoftDefenderAntivirus/Scan_ScanOnlyIfIdle**
@@ -5746,78 +5077,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Scan_ScanParameters**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the scan type to use during a scheduled scan. Scan type options are:
-
-- 1 = Quick Scan (default)
-- 2 = Full Scan
-
-If you enable this setting, the scan type will be set to the specified value.
-
-If you disable or do not configure this setting, the default scan type will used.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Specify the scan type to use for a scheduled scan*
-- GP name: *Scan_ScanParameters*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Scan*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-**ADMX_WindowsDefender/Scan_ScheduleDay**
+**ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleDay**
@@ -5893,80 +5153,12 @@ ADMX Info:
- GP path: *Windows Components\Microsoft Defender Antivirus\Scan*
- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-**ADMX_WindowsDefender/Scan_ScheduleQuickScantime**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify the time of day at which to perform a daily quick scan. The time value is represented as the number of minutes past midnight (00:00). For example, 120 (0x78) is equivalent to 02:00 AM. By default, this setting is set to a time value of 2:00 AM. The schedule is based on local time on the computer where the scan is executing.
-
-If you enable this setting, a daily quick scan will run at the time of day specified.
-
-If you disable or do not configure this setting, a daily quick scan will run at a default time.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Specify the time for a daily quick scan*
-- GP name: *Scan_ScheduleQuickScantime*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Scan*
-- GP ADMX file name: *WindowsDefender.admx*
-
-**ADMX_WindowsDefender/Scan_ScheduleTime**
+**ADMX_MicrosoftDefenderAntivirus/Scan_ScheduleTime**
@@ -6035,7 +5227,7 @@ ADMX Info:
-**ADMX_WindowsDefender/ServiceKeepAlive**
+**ADMX_MicrosoftDefenderAntivirus/ServiceKeepAlive**
@@ -6104,7 +5296,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_ASSignatureDue**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ASSignatureDue**
@@ -6173,7 +5365,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_AVSignatureDue**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_AVSignatureDue**
@@ -6242,7 +5434,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_DefinitionUpdateFileSharesSources**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DefinitionUpdateFileSharesSources**
@@ -6311,7 +5503,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_DisableScanOnUpdate**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScanOnUpdate**
@@ -6380,7 +5572,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_DisableScheduledSignatureUpdateonBattery**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableScheduledSignatureUpdateonBattery**
@@ -6449,7 +5641,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_DisableUpdateOnStartupWithoutEngine**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_DisableUpdateOnStartupWithoutEngine**
@@ -6518,7 +5710,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_FallbackOrder**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_FallbackOrder**
@@ -6589,7 +5781,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_ForceUpdateFromMU**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ForceUpdateFromMU**
@@ -6658,7 +5850,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_RealtimeSignatureDelivery**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_RealtimeSignatureDelivery**
@@ -6727,7 +5919,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_ScheduleDay**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleDay**
@@ -6808,7 +6000,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_ScheduleTime**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_ScheduleTime**
@@ -6877,7 +6069,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_SharedSignaturesLocation**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SharedSignaturesLocation**
@@ -6943,7 +6135,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_SignatureDisableNotification**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureDisableNotification**
@@ -7012,7 +6204,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateCatchupInterval**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_SignatureUpdateCatchupInterval**
@@ -7081,76 +6273,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SignatureUpdate_SignatureUpdateInterval**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to specify an interval at which to check for security intelligence updates. The time value is represented as the number of hours between update checks. Valid values range from 1 (every hour) to 24 (once per day).
-
-If you enable this setting, checks for security intelligence updates will occur at the interval specified.
-
-If you disable or do not configure this setting, checks for security intelligence updates will occur at the default interval.
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Specify the interval to check for security intelligence updates*
-- GP name: *SignatureUpdate_SignatureUpdateInterval*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Security Intelligence Updates*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-
-**ADMX_WindowsDefender/SignatureUpdate_UpdateOnStartup**
+**ADMX_MicrosoftDefenderAntivirus/SignatureUpdate_UpdateOnStartup**
@@ -7219,7 +6342,7 @@ ADMX Info:
-**ADMX_WindowsDefender/SpynetReporting**
+**ADMX_MicrosoftDefenderAntivirus/SpynetReporting**
@@ -7302,7 +6425,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Spynet_LocalSettingOverrideSpynetReporting**
+**ADMX_MicrosoftDefenderAntivirus/Spynet_LocalSettingOverrideSpynetReporting**
@@ -7368,81 +6491,11 @@ ADMX Info:
-
-
-**ADMX_WindowsDefender/SubmitSamplesConsent**
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting configures behaviour of samples submission when opt-in for MAPS telemetry is set.
-
-Possible options are:
-
-- (0x0) Always prompt
-- (0x1) Send safe samples automatically
-- (0x2) Never send
-- (0x3) Send all samples automatically
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Send file samples when further analysis is required*
-- GP name: *SubmitSamplesConsent*
-- GP path: *Windows Components\Microsoft Defender Antivirus\MAPS*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-**ADMX_WindowsDefender/Threats_ThreatIdDefaultAction**
+**ADMX_MicrosoftDefenderAntivirus/Threats_ThreatIdDefaultAction**
@@ -7513,85 +6566,7 @@ ADMX Info:
-**ADMX_WindowsDefender/Threats_ThreatSeverityDefaultAction**
-
-
-
-
- | Windows Edition |
- Supported? |
-
-
- | Home |
- |
-
-
- | Pro |
- |
-
-
- | Business |
- |
-
-
- | Enterprise |
- |
-
-
- | Education |
- |
-
-
-
-
-
-
-
-[Scope](./policy-configuration-service-provider.md#policy-scope):
-
-> [!div class = "checklist"]
-> * Device
-
-
-
-
-
-Available in the latest Windows 10 Insider Preview Build. This policy setting allows you to customize which automatic remediation action will be taken for each threat alert level.Threat alert levels should be added under the Options for this setting. Each entry must be listed as a name value pair. The name defines a threat alert level. The value contains the action ID for the remediation action that should be taken.
-
-Valid threat alert levels are:
-
-- 1 = Low
-- 2 = Medium
-- 4 = High
-- 5 = Severe
-
-Valid remediation action values are:
-
-- 2 = Quarantine
-- 3 = Remove
-- 6 = Ignore
-
-
-> [!TIP]
-> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
->
-> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
->
-> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
-
-
-ADMX Info:
-- GP English name: *Specify threat alert levels at which default action should not be taken when detected*
-- GP name: *Threats_ThreatSeverityDefaultAction*
-- GP path: *Windows Components\Microsoft Defender Antivirus\Threats*
-- GP ADMX file name: *WindowsDefender.admx*
-
-
-
-
-
-
-**ADMX_WindowsDefender/UX_Configuration_CustomDefaultActionToastString**
+**ADMX_MicrosoftDefenderAntivirus/UX_Configuration_CustomDefaultActionToastString**
@@ -7660,7 +6635,7 @@ ADMX Info:
-**ADMX_WindowsDefender/UX_Configuration_Notification_Suppress**
+**ADMX_MicrosoftDefenderAntivirus/UX_Configuration_Notification_Suppress**
@@ -7729,7 +6704,7 @@ ADMX Info:
-**ADMX_WindowsDefender/UX_Configuration_SuppressRebootNotification**
+**ADMX_MicrosoftDefenderAntivirus/UX_Configuration_SuppressRebootNotification**
@@ -7796,7 +6771,7 @@ ADMX Info:
-**ADMX_WindowsDefender/UX_Configuration_UILockdown**
+**ADMX_MicrosoftDefenderAntivirus/UX_Configuration_UILockdown**