windows-itpro-docs/windows/client-management/mdm/policy-csp-webthreatdefense.md

title, description, ms.author, ms.topic, ms.prod, ms.technology, author, ms.localizationpriority, ms.date, ms.reviewer, manager

title	description	ms.author	ms.topic	ms.prod	ms.technology	author	ms.localizationpriority	ms.date	ms.reviewer	manager
Policy CSP - WebThreatDefense	Learn about the Policy CSP - WebThreatDefense.	v-aljupudi	article	w10	windows	alekyaj	medium	09/27/2019		aaroncz

Policy CSP - WebThreatDefense

---

WebThreatDefense policies

WebThreatDefense/EnableService

Tip

These are ADMX-backed policies and require a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

WebThreatDefense/EnableService

Edition	Windows 10	Windows 11
Home	Yes	Yes
Pro	Yes	Yes
Windows SE	Yes	Yes
Business	Yes	Yes
Enterprise	Yes	Yes
Education	Yes	Yes

---

Scope:

[!div class = "checklist"]

• Device

---

This policy protects user's password from being stolen or used unsafely in apps and web-sites. By enabling this feature, one can control "Phishing protection" on user machine:

• Enterprise admins to turn off the feature for all users.
• Enterprise admins to turn on the feature for all users.
• Enterprise admins to have Phishing Sensors show UX to end-users for password entry on malicious content (first checkbox).
• Enterprise admins to have Phishing Sensors show UX to end-users for password entry on malicious content AND unsafe password entry (first and second checkbox checked) - this is default for enterprise admins when the feature is on.

ADMX Info:

• GP Friendly name: Configure Web Threat Defense
• GP name: EnableWebThreatDefenseService
• GP path: Windows Security\App & bowser control\Reputation-based protection\Phishing protections
• GP ADMX file name: WebThreatDefense.admx

---