Configure Brute-Force Protection aggressiveness

Supported on: At least Windows Server 2016, Windows 10 Version 1607

Registry

HKLM Software\Policies\Microsoft\Windows Defender\Remediation\Behavioral Network Blocks\Brute Force Protection

Value name: BruteForceProtectionAggressiveness

Options

BruteForceProtectionAggressiveness enum
  • Low -> 0
  • Medium -> 1
  • High -> 2

Description

Set the criteria for when Brute-Force Protection blocks IP addresses. Supported settings: *0 - Low: Block only when confidence level is 100% (Default) *1 - Medium: Use cloud aggregation and block when confidence level is above 99% *2 - High: Use cloud intel and context, and block when confidence level is above 90%