Share this article
Improve this guide
7 Best Windows Defender Settings For Advanced Protection
Better protection is the need of the hour
7 min. read
Published onJanuary 22, 2024
published onJanuary 22, 2024
Share this article
Improve this guide
Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more
Windows Defender Security Center, also collectively known as Windows Security, is the built-in antivirus in Windows. We often compare it with other well-known antivirus solutions, but with the best Windows Defender settings in place, it’s at par with them all!
Is Windows Defender 100% accurate? After conducting extensive tests on its automatic scans, ransomware protection, and firewall, we can say the Windows Defender can detect most threats, but it isn’t 100% accurate. And there’s no need for that as long as you practice healthy cyber hygiene.
Let’s now get to the steps to boost the PC’s security with the best Windows Defender settings!
What are the best Windows Defender settings?
We are listing the best Windows Defender settings after rigorous tests on ten different devices running Windows 10 and Windows 11 (5 each). Our experts tried downloading malicious apps and files to verify the effectiveness of each built-in setting.
Below, you will find what the feature does, the steps to enable it, and tips for optimal results.
1. Real-time Protection
The most vital of all,Real-time protection, ensures that no malware runs on the device. It blocks all malicious activity, prevents suspicious apps from installing, and keeps your Windows PC safe.
Remember, it’s not recommended that you disableReal-time protection. Even if you do, it will automatically turn on in a while. Besides, an active status of the feature is critical for enabling other Windows Defender settings.
2. Controlled folder access
2.1 Enabling the feature
2.2 Viewing and adding protected folders
2.3 Allowing an app through Controlled folder access
Another one of the best Windows Defender settings isControlled folder access. It prevents unfriendly apps from making changes to critical folders and memory areas. For the feature to work, you must have Real-time protection enabled.
Also, you can add as many to the list of protected folders, but removing protection from a Windows system folder (added by default) is not possible.
Besides, we came across a few cases whereControlled folder accessconflicted with safe and verified apps, such as whenWarzone settings were not saving. In these cases, you can always add an exclusion for the app!
3. Parental controls
In today’s world, where cyber crimes are on the rise, enforcing security mechanisms for children is of prime importance. And Windows Defender allows you to do that for free!
Just add your child’s account to the family, and you can choose a time limit, prevent inappropriate searches, configure an age filter for apps and games, and set the spending limit.
While it is available in Windows Security underFamily options, you will have to access theMicrosoft Family Safety portalto configure these settings. If you are new to it, learn how toset up family safety.
4. Core isolation
Core Isolation, one of the best Windows Defender settings, has three sub-settings:
Remember, Core Isolation is one of the trickier settings, and enabling it often results in an error. We, too, came across theResolve any driver incompatibilities and scan againerror message. To fix it, review the incompatible drivers and thenuninstall the driverresponsible for the issue.
If that doesn’t work, pressWindows+Rto openRun> typeregedit> hitEnter> go toComputer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity> right-click on theEnabledDWORD > enter1underValue data> clickOK> restart the PC.
You should now be able to enable the toggle forMemory Integrity. Do so, and then restart the PC again for the changes to apply.
5. Reputation-based protection
Reputation-based protection is a built-in feature in Windows Defender that protects the PC against malicious apps (Potentially Unwanted Applications) and files from the web. It also protects critical sign-in information, including email addresses and passwords.
6. Exploit protection
Exploit protectionsafeguards against malware attacks that employ exploits to infect the device. The feature has different settings that can be applied system-wide and for individual apps. If you manually configure mitigation for a specific app, it will override the system settings.
Remember, the best exploit protection settings are already in place. So, it’s not recommended you change them. Also, you can export the exploit protection settings to an XML file to set the same configuration on another device.
7. Firewall and network protection
Windows Defender Firewall, a built-in component of Windows Security, is critical for the security of the device/network. It filters malicious traffic and blocks online cyber-attacks. Again, it’s recommended that you don’t change the default settings unless thefirewall is blocking a port or program.
Besides, you can configure the inbound or outbound rules if an app is not running or there are issues with network connectivity, say thefirewall is blocking the printer. In our experience, it’s a rare event.
These were the best Windows Defender settings to protect your PC against localized and Internet-based threats.
Lastly, we would like to emphasize that you must notpermanently disable Windows Securityto run an app or process, no matter what the Internet says. Update the app or contact the developer for a resolution, but never put your PC at risk!
Before you leave, discover thebest Windows security settingsfor enhanced device protection.
For any queries or to share your take on Windows Defender/Security, drop a comment below.
More about the topics:Microsoft Windows Defender
Kazim Ali Alvi
Windows Hardware Expert
Kazim has always been fond of technology, be it scrolling through the settings on his iPhone, Android device, or Windows PC. He’s specialized in hardware devices, always ready to remove a screw or two to find out the real cause of a problem.
Long-time Windows user, Kazim is ready to provide a solution for your every software & hardware error on Windows 11, Windows 10 and any previous iteration. He’s also one of our experts in Networking & Security.
User forum
0 messages
Sort by:LatestOldestMost Votes
Comment*
Name*
Email*
Commenting as.Not you?
Save information for future comments
Comment
Δ
Kazim Ali Alvi
Windows Hardware Expert
Kazim is specialized in hardware devices, always ready to remove a screw or two to find out the real cause of a problem.
