Validate device protection settings on Windows 10 PCs

Verify that Windows 10 device policies are set

After you set up devices policies, it may take up to a few hours for the policy to take effect on users' devices. You can confirm that the policies took effect by looking at various Windows Settings screens on the users' devices. Because the users won't be able to modify the Windows Update and Windows Defender Antivirus settings on their Windows 10 devices, a lot of those options will be greyed out.

  1. Go to Settings > Update & security > Windows Update > Restart options and confirm that all settings are greyed out.

    All the Restart options are greyed out.

  2. Go to Settings > Update & security > Windows Update > Advanced options and confirm that all settings are greyed out.

    Windows Advanced updates options are all greyed out.

  3. Go to Settings > Update & security > Windows Update > Advanced options > Choose how updates are delivered.

    Confirm that you can see the message (in red) that some settings are hidden or managed by your organization, and all the options are greyed out.

    Choose how updates are delivered page indicates settings are hidden or managed by your organization.

  4. To open the Windows Defender Security Center, go to Settings > Update & security > Windows Defender > click Open Windows Defender Security Center > Virus & thread protection > Virus & threat protection settings.

  5. Verify that all options are greyed out.

    The Virus and threat protection settings are greyed out.

Microsoft 365 Business documentation and resources

Get started with Microsoft 365 Business

Manage Microsoft 365 Business

Set device configurations for Windows 10 PCs