Policy
Turn on heuristics
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2012, WindowsServer2012R2, WindowsServer2016
This policy setting allows you to configure heuristics. Suspicious detections will be suppressed right before reporting to the engine client. Turning off heuristics will reduce the capability to flag new threats. It is recommended that you do not turn off heuristics. If you enable or do not configure this setting, heuristics will be enabled. If you disable this setting, heuristics will be disabled.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows Defender\Scan\DisableHeuristics | REG_DWORD | 0 | 1 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- ComputerAllow users to pause scanAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerCheck for the latest virus and spyware security intelligence before running a scheduled scanAt least Windows Vista
- ComputerConfigure local setting override for maximum percentage of CPU utilizationAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure local setting override for schedule scan dayAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure local setting override for scheduled quick scan timeAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure local setting override for scheduled scan timeAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure local setting override for the scan type to use for a scheduled scanAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerConfigure low CPU priority for scheduled scansAt least Windows Server 2016, Windows 10 Version 1809
- ComputerConfigure scanning of network filesAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerCPU throttling typeAt least Windows Server 2016, Windows 10 Version 1607
- ComputerCreate a system restore pointAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerDefine the number of days after which a catch-up scan is forcedAt least Windows Server 2012, Windows 8 or Windows RT