Virus and threat protection

Applies to

  • Windows 10
  • Windows 11

The Virus & threat protection section contains information and settings for antivirus protection from Microsoft Defender Antivirus and third-party AV products.

In Windows 10, version 1803, this section also contains information and settings for ransomware protection and recovery. These settings include Controlled folder access settings to prevent unknown apps from changing files in protected folders, plus Microsoft OneDrive configuration to help you recover from a ransomware attack. This area also notifies users and provides recovery instructions if there's a ransomware attack.

IT administrators and IT pros can get more configuration information from these articles:

You can hide the Virus & threat protection section or the Ransomware protection area from users of the machine. This option can be useful if you don't want employees in your organization to see or have access to user-configured options for these features.

Hide the Virus & threat protection section

You can choose to hide the entire section by using Group Policy. The section won't appear on the home page of the Windows Security app, and its icon won't be shown on the navigation bar on the side of the app.

This section can be hidden only by using Group Policy.

Important

Requirements

You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.

  1. On your Group Policy management machine, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and click Edit.

  2. In Group Policy Management Editor, go to Computer configuration and click Administrative templates.

  3. Expand the tree to Windows components > Windows Security > Virus and threat protection.

  4. Open the Hide the Virus and threat protection area setting and set it to Enabled. Click OK.

  5. Deploy the updated GPO as you normally do.

Note

If you hide all sections then the app will show a restricted interface, as in the following screenshot:

Windows Security app with all sections hidden by Group Policy.

Hide the Ransomware protection area

You can choose to hide the Ransomware protection area by using Group Policy. The area won't appear on the Virus & threat protection section of the Windows Security app.

This area can be hidden only by using Group Policy.

Important

Requirements

You must have Windows 10, version 1709 or later. The ADMX/ADML template files for earlier versions of Windows do not include these Group Policy settings.

  1. On your Group Policy management machine, open the Group Policy Management Console, right-click the Group Policy Object you want to configure and click Edit.

  2. In Group Policy Management Editor, go to Computer configuration and click Administrative templates.

  3. Expand the tree to Windows components > Windows Security > Virus and threat protection.

  4. Open the Hide the Ransomware data recovery area setting and set it to Enabled. Click OK.

  5. Deploy the updated GPO as you normally do.