Windows 安全^{(Windows Security)}，以前称为Windows Defender，是一个功能强大的实用程序，可以立即以最少的努力将安全系统设置为最高或最高。ConfigureDefender是一个免费工具，它使用PowerShell cmdlet 来执行脚本，并更改​​组策略设置来配置这些。用户界面更直接，这意味着您不必拥有技术优势。但是，您需要管理员权限才能进行更改。

立即配置Windows 安全^{(Windows Security)}设置

ConfigureDefender是一个小型便携式工具，只需单击一下即可配置 Windows 安全性或 Defender 设置。您可以立即应用High和Max Settings以进一步强化 Defender 设置^{(further harden Defender settings)}。高级用户可以使用Windows 注册表^{(Windows Registry)}、Windows 组策略^{(Windows Group Policy)}和PowerShell 命令^{(PowerShell Commands)}手动更改设置。

此应用程序是Hard_Configurator程序的一部分，该程序提供软件限制策略^{(Software Restriction Policy)}并强化窗口以使其安全。但是，您可以使用ConfigureDefender，它是一个独立的应用程序来增强Windows 安全^{(Windows Security)}性。它唯一缺少的是实时监控，它已被Windows标记为已删除。

该应用程序提供了一个单屏界面，其中列出了所有安全设置及其当前状态。除了这些设置之外，您还可以访问可以在Default、High和Max之间更改^(Max)Microsoft 安全^{(Microsoft Security)}设置的快速操作按钮。您也可以手动更改个别设置。

当您选择最大保护级别时，它会通过减少攻击面、受控文件夹访问、SmartScreen（设置为阻止）和云级别（设置为阻止）来记录任何可疑攻击- Defender 安全中心^{(Defender Security Center)}被隐藏。当您应用更改时，它将应用带有警告的设置，并显示排除的文件夹。

以下是通过 ConfigureDefender 可用于所有Windows 10版本的设置列表

• 实时监控
• 行为监测
• 扫描所有下载的文件和附件
• 报告级别^(Level)（MAPS会员级别）
• 扫描时的平均 CPU 负载
• 自动提交样品
• 可能不需要的应用程序^{(Potentially Unwanted Applications)}（简称：PUA保护）
• 云保护级别（默认）
• 云检查时间限制。

手动配置^{(Configure Settings)}Windows Defender的设置

高级用户可以使用Windows 注册表^{(Windows Registry)}、Windows 组策略^{(Windows Group Policy,)}和PowerShell 命令^{(PowerShell Commands)}手动更改设置。这些是您可以学习在单台或多台计算机上配置的重要设置。

• 组策略管理控制台（gpedit.msc 在^{(Group Policy Management Console)}Windows 家庭^{(Windows Home)}版中不可用）
• 直接通过注册表^(Registry)编辑（手动，通过 *.reg 文件或脚本）
• PowerShell cmdlet（set-mppreference、add-mppreference、remove-mppreference、PowerShell 5.0）。

Windows Defender 注册表项位置^{(Defender Registry Keys Location)}

所有设置都在以下路径中可用，可以使用注册表编辑器进行访问。 

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

Windows Defender GPO 位置

Computer configuration > Administrative templates > Windows components > Windows Defender Antivirus.

^(MAPS)如果切换某些设置以确保将它们设置回默认值，则应在使用该实用程序之前检查MAPS、MpEngine、实时保护^{(Real-time Protection)}、报告^(Reporting)、扫描^(Scan)、Spynet和Windows Defender Exploit Guard 。你可以从 GitHub 下载它。^{(download it from GitHub.)}

相关阅读：  ^{(Related read: )} WindefThreatsView：为 Windows Defender 威胁设置默认操作 ^{(WindefThreatsView: Set default actions for Windows Defender threats )}

Change Windows Security settings instantly with ConfigureDefender

Windows Security, earlier known as Windows Defender, is a powerful utility that can instantly set up a security system to a maximum or high with the least amount of effort. ConfigureDefender is a free tool that uses PowerShell cmdlets to execute scripts, and change group policy settings to configure these. The user interface is more straightforward, which means you don’t have to have a technical advantage. However, you will need admin privileges to make the changes.

Configure Windows Security settings instantly

ConfigureDefender is a small portable tool for configuring Windows Security or Defender settings with a click. You can apply High and Max Settings instantly to further harden Defender settings. Advanced users can manually change settings using Windows Registry, Windows Group Policy, and PowerShell Commands.

This application is a part of the Hard_Configurator program, which offers Software Restriction Policy and harden windows to make it secure. However, you can use ConfigureDefender, which is a standalone application to enhance Windows Security. The only thing it lacks is Real-Time monitoring, which has been removed as Windows flags it.

The application offers a one-screen interface which lists down all the security settings, and its current status. On top of those settings, you have access to quick action buttons that can change Microsoft Security settings between Default, High, and Max. You can change individual settings manually as well.

When you choose Max protection level, it clocks any suspicious attacks via Attack Surface Reduction, Controlled Folder Access, SmartScreen (set to block), and cloud level (set to block) – Defender Security Center is hidden. When you apply the change, it will apply the settings with a warning, and display the excluded folders.

Here is the list of settings available for all Windows 10 versions through ConfigureDefender

• Real-time Monitoring
• Behavior Monitoring
• Scan all downloaded files and attachments
• Reporting Level (MAPS membership level)
• Average CPU Load while scanning
• Automatic Sample Submission
• Potentially Unwanted Applications (short: PUA Protection)
• Cloud Protection Level (Default)
• Cloud Check Time Limit.

Manually Configure Settings for Windows Defender

Advanced users can manually change settings using Windows Registry, Windows Group Policy, and PowerShell Commands. These are important settings that you can learn to configure on single or multiple computers.

• Group Policy Management Console (gpedit.msc is not available in Windows Home edition)
• Direct via Registry editing (manually, via *.reg files or scripts)
• PowerShell cmdlets (set-mppreference, add-mppreference, remove-mppreference, PowerShell 5.0).

Windows Defender Registry Keys Location

All the settings are available on the following path, which can be accessed using Registry Editor. 

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

Windows Defender GPO Location

Computer configuration > Administrative templates > Windows components > Windows Defender Antivirus.

MAPS, MpEngine, Real-time Protection, Reporting, Scan, Spynet, and Windows Defender Exploit Guard, should be inspected before using the utility if some settings are switched to ensure they are set back to the defaults. You can download it from GitHub.

Related read:  WindefThreatsView: Set default actions for Windows Defender threats 

Related posts

• 您的IT administrator已禁用Windows Security

• 如何将File type or Process Exclusion添加到Windows Security

• 从Windows Security修改Exploit Protection防止用户

• 如何打开Windows Security Center在Windows 10

• 什么是Windows 10中的Device Security以及如何隐藏这个区域？

• 如何在Windows 10的Exploit Protection中添加或排除应用程序

• Windows Defender vs. Security Essentials vs Safety Scanner

• 使用新的 Windows Defender 安全中心可以做的 5 件事

• 当存储Windows Defender Offline扫描日志？

• 如何在 Windows 8 和 Windows 8.1 中使用 Windows Defender

• 具有高级安全性的 Windows Defender 防火墙：它是什么？如何打开它？你能用它做什么？

• Fix Windows Defender Error 0x800b0100在Windows 10上

• 如何在Windows Defender Firewall中编辑允许的应用程序列表（并阻止其他）

• Fix Windows Defender error 0x8007139f在Windows 11/10上

• 在Windows 10中转ON or OFF基于信誉的保护设置

• 如何从Windows Defender scan在Windows 10排除的文件夹

• 如何添加Windows Security级联Context Menu item

• 什么是Windows 10中的Firewall and Network Protection以及如何隐藏此部分

• 在Windows Defender启用和配置Ransomware Protection

• Windows Security中glance page的安全性在Windows 10中是空白的