Virus and threat protection

Applies to

  • Windows 10, version 1703 and later

The Virus & threat protection section contains information and settings for antivirus protection from Windows Defender Antivirus and third-party AV products.

In Windows 10, version 1803, this section also contains information and settings for ransomware protection and recovery. This includes Controlled folder access settings to prevent unknown apps from changing files in protected folders, plus Microsoft OneDrive configuration to help you recover from a ransomware attack. This area also notifies users and provides recovery instructions in the event of a ransomware attack.

IT administrators and IT pros can get more information and documentation about configuration from the following:

You can choose to hide the Virus & threat protection section or the Ransomware protection area from users of the machine. This can be useful if you don't want employees in your organization to see or have access to user-configured options for the features shown in the section.

Hide the Virus & threat protection section

You can choose to hide the entire section by using Group Policy. The section will not appear on the home page of the Windows Defender Security Center app, and its icon will not be shown on the navigiation bar on the side of the app.

This can only be done in Group Policy.

Important

Requirements

You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.

  1. On your Group Policy management machine, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and click Edit.

  2. In the Group Policy Management Editor go to Computer configuration and click Administrative templates.

  3. Expand the tree to Windows components > Windows Defender Security Center > Virus and threat protection.

  4. Open the Hide the Virus and threat protection area setting and set it to Enabled. Click OK.

  5. Deploy the updated GPO as you normally do.

Note

If you hide all sections then the app will show a restricted interface, as in the following screenshot:

Windows Defender Security Center app with all sections hidden by Group Policy

Hide the Ransomware protection area

You can choose to hide the Ransomware protection area by using Group Policy. The area will not appear on the Virus & threat protection section of the Windows Defender Security Center app.

This can only be done in Group Policy.

Important

Requirements

You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.

  1. On your Group Policy management machine, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and click Edit.

  2. In the Group Policy Management Editor go to Computer configuration and click Administrative templates.

  3. Expand the tree to Windows components > Windows Defender Security Center > Virus and threat protection.

  4. Open the Hide the Ransomware data recovery area setting and set it to Enabled. Click OK.

  5. Deploy the updated GPO as you normally do.