Policy
Turn on behavior monitoring
This policy setting allows you to configure behavior monitoring. If you enable or do not configure this setting, behavior monitoring will be enabled. If you disable this setting, behavior monitoring will be disabled.
PackMicrosoft Windows
CategoryWindows Components / Microsoft Defender Antivirus / Real-time Protection
Policy ID
a9d10c249e07Internal name
RealtimeProtection_DisableBehaviorMonitoringRegistry
Copy registry mappings
HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableBehaviorMonitoring (enabled) = 0
HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection\DisableBehaviorMonitoring (disabled) = 1Policy notes
This policy setting allows you to configure behavior monitoring. If you enable or do not configure this setting, behavior monitoring will be enabled. If you disable this setting, behavior monitoring will be disabled.
Related policies
Configure local setting override for monitoring file and program activity on your computerConfigure local setting override for scanning all downloaded files and attachmentsConfigure local setting override for turn on behavior monitoringConfigure local setting override to turn on real-time protectionConfigure monitoring for incoming and outgoing file and program activityConfigure performance mode statusConfigure real-time protection and Security Intelligence Updates during OOBEDefine the maximum size of downloaded files and attachments to be scannedMonitor file and program activity on your computerScan all downloaded files and attachmentsTurn off real-time protectionTurn on process scanning whenever real-time protection is enabledTurn on raw volume write notificationsTurn on script scanning