Citrix Endpoint Management

Defender device policy

March 6, 2024

Contributed by:

K C

Windows Defender is a malware protection included with Windows 10 and Windows 11. You can use the Citrix Endpoint Management device policy, Defender, to configure the Microsoft Defender policy for Windows 10 and Windows 11 desktop and tablet devices.

To add or configure this policy, go to Configure > Device Policies. For more information, see Device policies.

Windows Desktop and Tablet settings

Device Policies configuration screen

Allow scanning of archived files: Allows or blocks Defender to scan archived files. Defaults to Off.
Allow cloud protection: Allows or blocks Defender to send information to Microsoft about malware activity. Defaults to On.
Allow a full scan of removable drives: Allows or blocks Defender to scan removable drives such as USB sticks. Defaults to On.
Allow real-time monitoring: Defaults to On.
Allow scans of network files: Allows or blocks Defender to scan network files. Defaults to On.
Allow access to the Windows Defender UI: Specifies whether users can access the Windows Defender user interface. This setting takes effect the next time the user device starts. If this setting is set as Off, users don’t receive any Windows Defender notifications. Defaults to On.
Excluded extensions: The extensions to exclude from real-time or scheduled scans. To separate extensions, use the | character. For example, lib\|obj.
Excluded paths: The paths to exclude from real-time or scheduled scans. To separate paths, use the | character. For example, C:\Example|C:\Example1.
Excluded processes: The processes to exclude from real-time or scheduled scans. To separate processes, use the | character. For example, C:\Example.exe|C:\Example1.exe.
Submit samples for further analysis: Controls whether to send to Microsoft files that might require further analysis to determine if they’re malicious. Options: Always prompt, Send safe samples, Never send, Send all samples. Defaults to Send safe samples.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Defender device policy

March 6, 2024

Contributed by:

K C

March 6, 2024

Contributed by:

K C

Defender device policy

Windows Desktop and Tablet settings

In this article