Configure whether to report Dynamic Signature dropped events
Jump to overview

Policy overview

Key metadata and intent for this policy.

Computer
Category
Windows Components > Microsoft Defender Antivirus > Reporting
Supported on
At least Windows Server 2012, Windows 8 or Windows RT

Supported OS tags: Windows10, Windows10RT, Windows11, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2012, WindowsServer2012R2, WindowsServer2016

This policy setting configures whether to report Dynamic Signature dropped events. If you do not configure this setting, the default value will be applied. The default value is set to disabled (such events are not reported). If you configure this setting to enabled, Dynamic Signature dropped events will be reported. If you configure this setting to disabled, Dynamic Signature dropped events will not be reported.

Internal name
Reporting_EnableDynamicSignatureDroppedEventReporting
Policy ID
ee46098fdc74
Elements
0

Registry values

How enabled and disabled states update the registry.

ScopeRegistry locationTypeEnabled valueDisabled valueCopy
Computer
Path
Software\Policies\Microsoft\Windows Defender\Reporting
Value name
EnableDynamicSignatureDroppedEventReporting
REG_DWORD
HKLM
1
HKLM
0
Registry location
Type REG_DWORD · Computer
Path
Software\Policies\Microsoft\Windows Defender\Reporting
Value name
EnableDynamicSignatureDroppedEventReporting
Hive
HKLM
Enabled value
1
Disabled value
0

Policy elements

Inputs and configuration options exposed by this policy.

This policy has no additional user input fields.