Configure Windows Defender Antivirus features

Applies to:

You can configure Windows Defender Antivirus with a number of tools, including:

  • Microsoft Intune
  • System Center Configuration Manager
  • Group Policy
  • PowerShell cmdlets
  • Windows Management Instrumentation (WMI)

The following broad categories of features can be configured:

  • Cloud-delivered protection
  • Always-on real-time protection, including behavioral, heuristic, and machine-learning-based protection
  • How end-users interact with the client on individual endpoints

The topics in this section describe how to perform key tasks when configuring Windows Defender Antivirus. Each topic includes instructions for the applicable configuration tool (or tools).

You can also review the Reference topics for management and configuration tools topic for an overview of each tool and links to further help.

In this section

Topic Description
Utilize Microsoft cloud-provided Windows Defender Antivirus protection Cloud-delivered protection provides an advanced level of fast, robust antivirus detection
Configure behavioral, heuristic, and real-time protection Enable behavior-based, heuristic, and real-time antivirus protection
Configure end-user interaction with Windows Defender Antivirus Configure how end-users interact with Windows Defender Antivirus, what notifications they see, and whether they can override settings