Privacy and Security Enable or Disable Cloud-delivered Protection for Microsoft Defender Antivirus in Windows 11

  • Staff
Windows_Security_banner.png

Microsoft Defender Antivirus is an antivirus software that is included in Windows 11 and can help protect your device from viruses, malware, and other threats.

Cloud protection and automatic sample submission works together with Microsoft Defender Antivirus to deliver accurate, real-time, and intelligent protection. Microsoft Defender Antivirus works seamlessly with Microsoft cloud services. These cloud protection services, also referred to as Microsoft Advanced Protection Service (MAPS), enhance standard real-time protection. With cloud protection, next-generation technologies provide rapid identification of new threats, sometimes even before a single endpoint is infected.


mde-cloud-protection.png


This tutorial will show you how to enable or disable Cloud-delivered protection for Microsoft Defender Antivirus in Windows 11.


You must be signed in as an administrator to turn on/off or enable/disable Cloud-delivered protection for Microsoft Defender Antivirus.



Contents

  • Option One: Turn On or Off Cloud-delivered Protection for Microsoft Defender Antivirus in Windows Security
  • Option Two: Turn On or Off Cloud-delivered Protection for Microsoft Defender Antivirus using Command
  • Option Three: Enable or Disable Cloud-delivered Protection for Microsoft Defender Antivirus in Local Group Policy Editor
  • Option Four: Enable or Disable Cloud-delivered Protection for Microsoft Defender Antivirus using REG file





OPTION ONE

Turn On or Off Cloud-delivered Protection for Microsoft Defender Antivirus in Windows Security


1 Open Windows Security.

2 Click/tap on Virus & threat protection. (see screenshot below)

Microsoft_Defender_cloud-delivered_protection-1.png

3 Click/tap on the Manage settings link under Virus & threat protection settings. (see screenshot below)

Microsoft_Defender_cloud-delivered_protection-2.png

4 Turn On (default) or Off Cloud-delivered protection for what you want. (see screenshots below)

Microsoft_Defender_cloud-delivered_protection-3.png
Microsoft_Defender_cloud-delivered_protection-4.png

5 If prompted by UAC, click/tap on Yes to approve.

6 You can now close Windows Security if you like.





OPTION TWO

Turn On or Off Cloud-delivered Protection for Microsoft Defender Antivirus using Command


1 Open Windows Terminal (Admin), and select either Windows PowerShell or Command Prompt.

2 Copy and paste the command below you want to use into Windows Terminal (Admin), and press Enter. (see screenshots below)

(Default - Turn On Cloud-delivered Protection)
PowerShell Set-MpPreference -MAPSReporting 2
OR​
PowerShell Set-MpPreference -MAPSReporting Advanced

OR​

(Turn Off Cloud-delivered Protection)
PowerShell Set-MpPreference -MAPSReporting 0
OR​
PowerShell Set-MpPreference -MAPSReporting Disabled

3 You can now close Windows Terminal (Admin) if you like.

Turn_ON_Microsoft_Defender_cloud-delivered_protection_command.png

Turn_OFF_Microsoft_Defender_cloud-delivered_protection_command.png






OPTION THREE

Enable or Disable Cloud-delivered Protection for Microsoft Defender Antivirus in Local Group Policy Editor


The Local Group Policy Editor is only available in the Windows 11 Pro, Enterprise, and Education editions.

All editions can use Option Four for the same policy.


1 Open the Local Group Policy Editor (gpedit.msc).

2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)

Computer Configuration>Administrative Templates>Windows Components>Microsoft Defender Antivirus>MAPS

Microsoft_Defender_cloud-delivered_protection_gpedit-1.png

3 In the right pane of MAPS in the Local Group Policy Editor, double click/tap on the Join Microsoft MAPS policy to edit it. (see screenshot above)

4 Do step 5 (enable) or step 6 (disable) below for what you would like to do.


5 Enable Cloud-delivered Protection for Microsoft Defender Antivirus

This is the default setting to allow using Option One and Option Two.


A) Select (dot) Not Configured. (see screenshot below)​

B) Click/tap on OK, and go to step 7 below.​

Microsoft_Defender_cloud-delivered_protection_gpedit-2.png

6 Disable Cloud-delivered Protection for Microsoft Defender Antivirus

This will disable and prevent using Option One and Option Two.


A) Select (dot) Enabled. (see screenshot below)​

B) Select Disabled in the Join Microsoft MAPS drop menu under Options.​

C) Click/tap on OK, and go to step 7 below.​

Microsoft_Defender_cloud-delivered_protection_gpedit-3.png


7 You can now close the Local Group Policy Editor if you like.





OPTION FOUR

Enable or Disable Cloud-delivered Protection for Microsoft Defender Antivirus using REG file


1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.

2 Enable Cloud-delivered Protection for Microsoft Defender Antivirus

This is the default setting to allow using Option One and Option Two.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Enable_Cloud-delivered_protection_for_Microsoft_Defender_Antivirus.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet
"SpynetReporting"=-

3 Disable Cloud-delivered Protection for Microsoft Defender Antivirus

This will disable and prevent using Option One and Option Two.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Disable_Cloud-delivered_protection_for_Microsoft_Defender_Antivirus.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet]
"SpynetReporting"=dword:00000000

4 Save the .reg file to your desktop.

5 Double click/tap on the downloaded .reg file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 You can now delete the downloaded .reg file if you like.


That's it,
Shawn Brink


 

Attachments

  • Windows_Security.png
    Windows_Security.png
    6 KB · Views: 3
  • Disable_Cloud-delivered_protection_for_Microsoft_Defender_Antivirus.reg
    710 bytes · Views: 8
  • Enable_Cloud-delivered_protection_for_Microsoft_Defender_Antivirus.reg
    684 bytes · Views: 7
Last edited:
Top Bottom