Policy
Turn on behavior monitoring
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2012, WindowsServer2012R2, WindowsServer2016
This policy setting allows you to configure behavior monitoring. If you enable or do not configure this setting, behavior monitoring will be enabled. If you disable this setting, behavior monitoring will be disabled.
Internal name
RealtimeProtection_DisableBehaviorMonitoring
Policy ID
a9d10c249e07
Elements
0
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableBehaviorMonitoring | REG_DWORD | 0 | 1 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- ComputerConfigure local setting override for monitoring file and program activity on your computerAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure local setting override for monitoring for incoming and outgoing file activityAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure local setting override for scanning all downloaded files and attachmentsAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure local setting override for turn on behavior monitoringAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure local setting override to turn on real-time protectionAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure monitoring for incoming and outgoing file and program activityAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure performance mode statusWindows 11 22H1
- ComputerConfigure real-time protection and Security Intelligence Updates during OOBEAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerDefine the maximum size of downloaded files and attachments to be scannedAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerMonitor file and program activity on your computerAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerScan all downloaded files and attachmentsAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerTurn off real-time protectionAt least Windows Vista