Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

DoD Windows Defender Antivirus STIG Computer v1r5
Data collected on: 4/24/2019 10:50:18 AM |

General
Details

Domain | security.local
Owner | SECURITY\Domain Admins
Created | 4/24/2019 10:10:04 AM
Modified | 4/24/2019 10:10:18 AM
User Revisions | 1 (AD), 1 (SYSVOL)
Computer Revisions | 1 (AD), 1 (SYSVOL)
Unique ID | {7CBC19AC-0028-48C0-AC66-F22A4F188A66}
GPO Status | User settings disabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
None

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No
SECURITY\Domain Admins | Edit settings, delete, modify security | No
SECURITY\Enterprise Admins | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
MS Security Guide

Policy | Setting | Comment
--- | --- | ---
Turn on Windows Defender protection against Potentially Unwanted Applications | Enabled |

Windows Components/Windows Defender Antivirus/Exclusions

Policy | Setting | Comment
--- | --- | ---
Turn off Auto Exclusions | Disabled |

Windows Components/Windows Defender Antivirus/MAPS

Policy | Setting | Comment
--- | --- | ---
Configure the 'Block at First Sight' feature | Enabled |
Join Microsoft MAPS | Enabled |
Join Microsoft MAPS | Advanced MAPS
Policy | Setting | Comment
Send file samples when further analysis is required | Enabled |
Send file samples when further analysis is required |

Windows Components/Windows Defender Antivirus/Scan

Policy | Setting | Comment
--- | --- | ---
Scan removable drives | Enabled |
Specify the day of the week to run a scheduled scan | Enabled |
Specify the day of the week to run a scheduled scan |
Policy | Setting | Comment
Turn on e-mail scanning | Enabled |

Windows Components/Windows Defender Antivirus/Security Intelligence Updates

Policy | Setting | Comment
--- | --- | ---
Define the number of days before spyware security intelligence is considered out of date | Enabled |
Define the number of days before spyware security intelligence is considered out of date | 7
Policy | Setting | Comment
Define the number of days before virus security intelligence is considered out of date | Enabled |
Define the number of days before virus security intelligence is considered out of date | 7
Policy | Setting | Comment
Specify the day of the week to check for security intelligence updates | Enabled |
Specify the day of the week to check for security intelligence updates | Every Day

Windows Components/Windows Defender Antivirus/Threats

Policy | Setting | Comment
--- | --- | ---
Specify threat alert levels at which default action should not be taken when detected | Enabled |
Specify threat alert levels at which default action should not be taken when detected |
--- | ---
5 | 2
4 | 2
2 | 2
1 | 2

Windows Components/Windows Defender Antivirus/Windows Defender Exploit Guard/Attack Surface Reduction

Policy | Setting | Comment
--- | --- | ---
Configure Attack Surface Reduction rules | Enabled |
Set the state for each ASR rule: |
--- | ---
BE9BA2D9-53EA-4CDC-84E5-9B1EEEE46550 | 1
D4F940AB-401B-4EFC-AADC-AD5F3C50688A | 1
3B576869-A4EC-4529-8536-B80A7769E899 | 1
75668C1F-73B5-4CF0-BB93-3ECF5CB7CC84 | 1
D3E037E1-3EB8-44C8-A917-57927947596D | 1
5BEB7EFE-FD9A-4556-801D-275E5FFC04CC | 1
92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B | 1

Windows Components/Windows Defender Antivirus/Windows Defender Exploit Guard/Network Protection

Policy | Setting | Comment
--- | --- | ---
Prevent users and apps from accessing dangerous websites | Enabled |

User Configuration (Disabled)
No settings defined.