Allow real-time security intelligence updates based on reports to Microsoft MAPS

Supported OS tags: Windows10, Windows10RT, Windows11, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2012, WindowsServer2012R2, WindowsServer2016

This policy setting allows you to enable real-time security intelligence updates in response to reports sent to Microsoft MAPS. If the service reports a file as an unknown and Microsoft MAPS finds that the latest security intelligence update has security intelligence for a threat involving that file, the service will receive all of the latest security intelligence for that threat immediately. You must have configured your computer to join Microsoft MAPS for this functionality to work. If you enable or do not configure this setting, real-time security intelligence updates will be enabled. If you disable this setting, real-time security intelligence updates will disabled.

This policy has no additional user input fields.

• Computer
  Allow notifications to disable security intelligence based reports to Microsoft MAPS

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Allow security intelligence updates from Microsoft Update

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Allow security intelligence updates when running on battery power

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Allows Microsoft Defender Antivirus to update and communicate over a metered connection.

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Check for the latest virus and spyware security intelligence on startup

  At least Windows Server 2012, Windows 8 or Windows RT
• Computer
  Configure security intelligence updates according to the scheduler for VDI clients.

  At least Windows Server 2016, Windows 10 Version 1903
• Computer
  Define file shares for downloading security intelligence updates

  At least Windows Server 2012, Windows 8 or Windows RT