Policy

Turn on process scanning whenever real-time protection is enabled

Microsoft Windows

Back to Real-time ProtectionBack to main
Turn on process scanning whenever real-time protection is enabled
Jump to overview

Policy overview

Key metadata and intent for this policy.

Computer
Category
Windows Components > Microsoft Defender Antivirus > Real-time Protection
Supported on
At least Windows Server 2012, Windows 8 or Windows RT

Supported OS tags: Windows10, Windows10RT, Windows11, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2012, WindowsServer2012R2, WindowsServer2016

This policy setting allows you to configure process scanning when real-time protection is turned on. This helps to catch malware which could start when real-time protection is turned off. If you enable or do not configure this setting, a process scan will be initiated when real-time protection is turned on. If you disable this setting, a process scan will not be initiated when real-time protection is turned on.

Internal name
RealtimeProtection_DisableScanOnRealtimeEnable
Policy ID
bf4eb618044f
Elements
0

Registry values

How enabled and disabled states update the registry.

ScopeRegistry locationTypeEnabled valueDisabled valueCopy
Computer
Path
Software\Policies\Microsoft\Windows Defender\Real-Time Protection
Value name
DisableScanOnRealtimeEnable
REG_DWORD
HKLM
0
HKLM
1
Registry location
Type REG_DWORD · Computer
Path
Software\Policies\Microsoft\Windows Defender\Real-Time Protection
Value name
DisableScanOnRealtimeEnable
Hive
HKLM
Enabled value
0
Disabled value
1

Policy elements

Inputs and configuration options exposed by this policy.

This policy has no additional user input fields.