MDM_Policy_Config01_Defender02 class

[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.]

The MDM_Policy_Config01_Defender02class represents policies related to Windows Defender

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties.

Syntax

[InPartition("local-system"), dynamic, provider("DMWmiBridgeProv")]
class MDM_Policy_Config01_Defender02
{
  string InstanceID;
  string ParentID;
  sint32 AllowArchiveScanning;
  sint32 AllowBehaviorMonitoring;
  sint32 AllowCloudProtection;
  sint32 AllowEmailScanning;
  sint32 AllowFullScanOnMappedNetworkDrives;
  sint32 AllowFullScanRemovableDriveScanning;
  sint32 AllowIntrusionPreventionSystem;
  sint32 AllowIOAVProtection;
  sint32 AllowOnAccessProtection;
  sint32 AllowRealtimeMonitoring;
  sint32 AllowScanningNetworkFiles;
  sint32 AllowScriptScanning;
  sint32 AllowUserUIAccess;
  string AttackSurfaceReductionRules;
  string AttackSurfaceReductionOnlyExclusions;
  sint32 AVGCPULoadFactor;
  sint32 CloudExtendedTimeout;
  string ControlledFolderAccessProtectedFolders;
  string ControlledFolderAccessAllowedApplications;
  sint32 CloudBlockLevel;
  sint32 DaysToRetainCleanedMalware;
  sint32 EnableControlledFolderAccess;
  sint32 EnableNetworkProtection;
  sint32 PUAProtection;
  string ExcludedProcesses;
  string ExcludedPaths;
  string ExcludedExtensions;
  sint32 RealTimeScanDirection;
  sint32 ScanParameter;
  sint32 ScheduleQuickScanTime;
  sint32 ScheduleScanDay;
  sint32 ScheduleScanTime;
  sint32 SignatureUpdateInterval;
  sint32 SubmitSamplesConsent;
  string ThreatSeverityDefaultAction;
};

Members

The MDM_Policy_Config01_Defender02 class has these types of members:

• Properties

Properties

The MDM_Policy_Config01_Defender02 class has these properties.

AllowArchiveScanning

Data type: sint32

Access type: Read/write

AllowBehaviorMonitoring

Data type: sint32

Access type: Read/write

AllowCloudProtection

Data type: sint32

Access type: Read/write

AllowEmailScanning

Data type: sint32

Access type: Read/write

AllowFullScanOnMappedNetworkDrives

Data type: sint32

Access type: Read/write

AllowFullScanRemovableDriveScanning

Data type: sint32

Access type: Read/write

AllowIntrusionPreventionSystem

Data type: sint32

Access type: Read/write

AllowIOAVProtection

Data type: sint32

Access type: Read/write

AllowOnAccessProtection

Data type: sint32

Access type: Read/write

AllowRealtimeMonitoring

Data type: sint32

Access type: Read/write

AllowScanningNetworkFiles

Data type: sint32

Access type: Read/write

AllowScriptScanning

Data type: sint32

Access type: Read/write

AllowUserUIAccess

Data type: sint32

Access type: Read/write

AttackSurfaceReductionOnlyExclusions

Data type: string

Access type: Read/write

AttackSurfaceReductionRules

Data type: string

Access type: Read/write

AVGCPULoadFactor

Data type: sint32

Access type: Read/write

CloudBlockLevel

Data type: sint32

Access type: Read/write

CloudExtendedTimeout

Data type: sint32

Access type: Read/write

ControlledFolderAccessAllowedApplications

Data type: string

Access type: Read/write

ControlledFolderAccessProtectedFolders

Data type: string

Access type: Read/write

DaysToRetainCleanedMalware

Data type: sint32

Access type: Read/write

EnableControlledFolderAccess

Data type: sint32

Access type: Read/write

EnableNetworkProtection

Data type: sint32

Access type: Read/write

ExcludedExtensions

Data type: string

Access type: Read/write

ExcludedPaths

Data type: string

Access type: Read/write

ExcludedProcesses

Data type: string

Access type: Read/write

InstanceID

Data type: string

Access type: Read-only

Qualifiers: key

Identifies the name of the parent node. For this class, the string is "Defender".

ParentID

Data type: string

Access type: Read-only

Qualifiers: key

Describes the full path to the parent node. For this class, the string is "./Vendor/MSFT/Policy/Config"

PUAProtection

Data type: sint32

Access type: Read/write

RealTimeScanDirection

Data type: sint32

Access type: Read/write

ScanParameter

Data type: sint32

Access type: Read/write

ScheduleQuickScanTime

Data type: sint32

Access type: Read/write

ScheduleScanDay

Data type: sint32

Access type: Read/write

ScheduleScanTime

Data type: sint32

Access type: Read/write

SignatureUpdateInterval

Data type: sint32

Access type: Read/write

SubmitSamplesConsent

Data type: sint32

Access type: Read/write

ThreatSeverityDefaultAction

Data type: string

Access type: Read/write

Requirements

Requirement	Value
Minimum supported client	Windows 10 [desktop apps only]
Minimum supported server	None supported
Namespace	Root\CIMv2\MDM\DMMap
MOF	DMWmiBridgeProv.mof
DLL	DMWmiBridgeProv.dll

See also

Using PowerShell scripting with the WMI Bridge Provider