Thank you for answer, Jose Beltre
It does make sense that some premium features are available only via subscription. But I’m confused:
- why these advanced settings are accessible in Group Policy for home products? Maybe these which I manually turned on do not apply to premium ones?
- I have Windows 11 Pro, does this version of OS have additional features at malware protection besides the regularly setup Microsoft Defender Antivirus? I mean hidden settings in Group Policy
- Is it surely that specifically MAPS, Block at First Sight and level of cloud protection do only work via subscription? Does it mean they are either turned off or turned on that won’t change anything at the level of protection for Pro version users?
- Is Microsoft Defender Antivirus really enough for the peace of mind?
Unfortunately, as with many other technical features of Windows, the specifics of which features are available and how these are controlled often varies from one version to the next. However, these particular features of Windows Defender Antivirus are included in the Windows Home version, they're just not using the same GPO controls, since that feature isn't fully operable without an Active Directory domain and/or particular versions of Windows.
What Is "Group Policy" in Windows?
I won't bother to answer the questions regarding group policy, since that's the feature that really doesn't affect you, instead I'll concentrate on the truly important portions of question 3 which relate to how these features function on a personal, standalone version of Windows Home/Pro.
First, I'll make clear that ALL versions of Windows Defender and in fact nearly every Microsoft security scanning product that's existed since Microsoft Security Essentials contain some form of Cloud-based protection, which in earlier versions had different names such as MAPS (Microsoft Advanced Protection Service) and more often today are listed using the Cloud-based naming instead. See the following for a short description of this including more technical details and a visual description earlier in the article discussing how these added features work.
Cloud protection and Microsoft Defender Antivirus | Microsoft Learn
This means that the cloud protection settings are really just part of MAPS and vice versa, so yes, your Windows 10 or 11 device with Windows Defender Antivirus has these features, as do all three of those listed in the 'Applies to' section near the top of that article.
The Block-at-first-sight feature, though also part of the same three products listed, is managed in a different way for a personal device, which is described in the following section of this article specific to that feature. As it mentions, as long as both cloud protection features are turned on, the Block-at-first-sight feature will be enabled as well.
Enable block at first sight to detect malware in seconds | Microsoft Learn
Though I'm not quite sure what you mean by 'level of cloud protection' in your question, if that's referring to the several other individual features in that earlier document that depend upon cloud protection for their operation, then no, some of those specific features really don't have a useful purpose when operating on an individual personal device, since they're highly complex to configure and typically only of value in a managed IT environment with the trained people required to maintain them as well.
So, you'll see that the most useful features are really part of Windows Defender itself, it's just that their management and abilities might be slightly different in a managed IT environment versus the typical home user single device situation most here are involved in.
Rob