Monitor file and program activity on your computer

This policy setting allows you to configure monitoring for file and program activity.

If you enable or do not configure this setting, monitoring for file and program activity will be enabled.

If you disable this setting, monitoring for file and program activity will be disabled.

Supported on: At least Windows Server 2012, Windows 8 or Windows RT
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows Defender\Real-Time Protection
Value NameDisableOnAccessProtection
Value TypeREG_DWORD
Enabled Value0
Disabled Value1

windowsdefender.admx

Administrative Templates (Computers)

Administrative Templates (Users)