Prevent users from modifying settings

Supported on: At least Windows Server 2016, Windows 10 Version 1709

Registry

HKLM SOFTWARE\Policies\Microsoft\Windows Defender Security Center\App and Browser protection

Value name: DisallowExploitProtectionOverride

Enabled: DisallowExploitProtectionOverride = 1

Disabled: DisallowExploitProtectionOverride = 0

Description

Prevent users from making changes to the Exploit protection settings area in Windows Security. Enabled: Local users can not make changes in the Exploit protection settings area. Disabled: Local users are allowed to make changes in the Exploit protection settings area. Not configured: Same as Disabled.