Reference Guide

Manage Policies
from executing arbitrary code on the computer.
This policy must be set to Selected to enable
Exploit Protection. If thi
s policy is Not Selected,
no Exploit Prevention policies are applied.
Action on
Malicious Activity
for Files and
Folders
Block and Report
Block Only
Report Only
Block and Report
Prevents users from modifying or deleting Threat
Protection system files and folders and sets the
action to take upon attempt.
Block Only: Blocks activity but does not report to
the server.
Report Only: Reports activity to the server but does
not block activity.
Block and Report (default): Blocks and reports
activity to the server.
Action on
Malicious Activity
for Registry
Block and Report
Block Only
Report Only
Block and Report
Prevents users from modifying or deleting Threat
Protection registry keys and values and sets the
action to take upon attempt.
Block Only: Blocks activity but does not report to
the Server.
Report Only: Reports activity to the Server but does
not block activity.
Block and Report (default): Blocks and reports
activity to the Server.
On-Access
Protection
Selected
Selected
Not Selected
This policy is the "master policy" for all other On
-
Access Protection policies. If this policy is Not
Selected, no On-Access Protection policies are
enforced, regardless of other policy values.
A Selected value means that On-
Access Protection is
enabled.
This policy must be set to Selected to enable On-
Access Protection. If this policy is Not Selected,
no On-Access Protection policies are applied.
See advanced
settings
Policy Default Setting Description
Web Protection
This technology protects computers by leveraging a web-
based content ranking system to determine if a
site that a user is browsing is considered safe or not. This technology also grants the administrator the
ability to define what happens when an unsafe site is navigated to (allow, block, warn).
Web Protection Off
On
Off
Toggle to ON to enable Web Protection. If toggled to
OFF, no Web Protection policies are applied.
Enforcement -
Action to Apply to
Sites Not Verified
Allow
Block
Allow
Warn
Specifies t
he default action to apply to sites that
have not been verified.
Block: Prevents users from accessing the site and
displays a message that the site is blocked.
Allow: Permits users to access the site.
188