windows-itpro-docs/windows/security/operating-system-security/system-security/windows-defender-security-center/wdsc-app-browser-control.md

title, description, ms.date, ms.topic

title	description	ms.date	ms.topic
App & browser control in Windows Security	Use the App & browser control section to see and configure Windows Defender SmartScreen and Exploit protection settings.	04/15/2025	how-to

App and browser control

The App and browser control section contains information and settings for Windows Defender SmartScreen. IT administrators and IT pros can get configuration guidance from the Windows Defender SmartScreen documentation library.

In Windows 10, version 1709 and later, the section also provides configuration options for Exploit protection. You can prevent users from modifying these specific options with Group Policy. IT administrators can get more information at Exploit protection.

You can also choose to hide the section from users of the machine. This option can be useful if you don't want users in your organization to have access to user-configured options for the features shown in the section.

Prevent users from making changes to the Exploit protection area in the App & browser control section

You can prevent users from modifying settings in the Exploit protection area. The settings are either grayed out or don't appear if you enable this setting. Users still have access to other settings in the App & browser control section, such as those settings for Windows Defender SmartScreen, unless those options are separately.

Important

You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows don't include these Group Policy settings.

1. On your Group Policy management machine, open the Group Policy Management Console. Right-click the Group Policy Object (GPO) you want to configure and select Edit.
2. In the Group Policy Management Editor, go to Computer configuration, select Policies and then Administrative templates.
3. Expand the tree to Windows components > Windows Security > App and browser protection.
4. Select the Prevent users from modifying settings setting and set it to Enabled. Select OK.
5. Deploy the updated GPO as you normally do.

Hide the App & browser control section

You can choose to hide the entire section by using Group Policy. When hidden, this section doesn't appear on the home page of Windows Security, and its icon isn't shown on the navigation bar on the side.

Important

You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows don't include these Group Policy settings.

1. On your Group Policy management machine, open the Group Policy Management Console. Right-click the Group Policy Object you want to configure and select Edit.
2. In the Group Policy Management Editor go to Computer configuration, select Policies and then Administrative templates.
3. Expand the tree to Windows components > Windows Security > App and browser protection.
4. Open the Hide the App and browser protection area setting and set it to Enabled. Select OK.
5. Deploy the updated GPO as you normally do.

Note

If you hide all sections, then Windows Security shows a restricted interface, as in the following screenshot: