Windows Defender PUA feature?

WD has this new feature called PUA.
Is this for domain environments or can this be done on a standalone Win10 Enterprise? Or is this needed on a standalone system?

I know it has to be enabled in the registry.

If enabled, how will this effect the use of a machine? Will I get constant annoying notifications all the time?

How intrusive is enabling PUA?

How is it different fron enabling or disabling this feature from standard malware protection?

Thx!

So it's best to just leave it disabled?

Anyways, I practice safe computing habits and I rarely install programs which I do not need.

Is this for domain environments or can this be done on a standalone Win10 Enterprise? Or is this needed on a standalone system?

win10freak said:

...So it's best to just leave it disabled?

Anyways, I practice safe computing habits and I rarely install programs which I do not need.

TairikuOkami said:

Probably yes....

I disagree. Enabling PUA protection in Defender will scan anything save to your Downloads folder for PUAs, adware and unwanted browser extensions (things like the Ask Toolbar) stuff you often find bundled within the install packages from some of the sites offering popular software. It's similar to the sort of protection afforded by Malwarebytes Premium (the paid-for one) - real-time protection against PUPs.

While Microsoft aim PUA protection firmly at the Enterprise environment (and provide Enterprise tools to manage it) it can be enabled on anything, right down to my 10 Home. There's a Tutorial on this....

Note

The Potentially Unwanted Application protection feature is available only for enterprise customers. If you are already one of Microsoft's existing enterprise customers, you need to opt-in to enable and use PUA protection.


While Microsoft announced the new PUA feature as only available for the Enterprise edition of Windows 10, Home and Pro editions can also enable it on their Windows 10 PCs to block the deployment of adware during software installations.

PUA protection updates are included as part of the existing definition updates and cloud protection of Windows Defender.

Enable or Disable Windows Defender PUA Protection in Windows 10

...and starting at post #19 on in that thread I describe my experiences of enabling and testing that it works in Home. I leave it enabled permanently, I've not seen any false detections. Here's some of my test results...

TairikuOkami said:

...false positives, sort of... ytddownloader works, it is just adware/PUA.

As adware/PUA ytdownloader is a true positive, surely? :)

TairikuOkami said:

The point is, that it is a working legitimate software...

Depends on your definition of 'legitimate'...

Microsoft - Windows Defender Security Intelligence said:

This application was stopped from running on your network because it has a poor reputation. This application can affect the quality of your computing experience. We have seen this leading to the following potentially unwanted behaviors on PCs:

• Adds files that run at startup
• Modifies boot configuration data
• Injects into other processes on your system
• Changes browser settings
• Changes browser shortcuts
• Installs browser extensions
• Disables User Access Control (UAC)

PUA:Win32/YTDVideoDownload