Monitor file and program activity on your computer

Supported on: At least Windows Server 2012, Windows 8 or Windows RT

Registry

HKLM Software\Policies\Microsoft\Windows Defender\Real-Time Protection

Value name: DisableOnAccessProtection

Enabled: DisableOnAccessProtection = 0

Disabled: DisableOnAccessProtection = 1

Description

This policy setting allows you to configure monitoring for file and program activity. If you enable or do not configure this setting, monitoring for file and program activity will be enabled. If you disable this setting, monitoring for file and program activity will be disabled.