Configure Microsoft Defender Antivirus features

Applies to:

You can configure Microsoft Defender Antivirus with a number of tools, including:

  • Microsoft Intune
  • Microsoft Endpoint Configuration Manager
  • Group Policy
  • PowerShell cmdlets
  • Windows Management Instrumentation (WMI)

The following broad categories of features can be configured:

  • Cloud-delivered protection
  • Always-on real-time protection, including behavioral, heuristic, and machine-learning-based protection
  • How end-users interact with the client on individual endpoints

The topics in this section describe how to perform key tasks when configuring Microsoft Defender Antivirus. Each topic includes instructions for the applicable configuration tool (or tools).

You can also review the Reference topics for management and configuration tools topic for an overview of each tool and links to further help.

In this section

Topic Description
Utilize Microsoft cloud-provided Microsoft Defender Antivirus protection Cloud-delivered protection provides an advanced level of fast, robust antivirus detection
Configure behavioral, heuristic, and real-time protection Enable behavior-based, heuristic, and real-time antivirus protection
Configure end-user interaction with Microsoft Defender Antivirus Configure how end-users interact with Microsoft Defender Antivirus, what notifications they see, and whether they can override settings