Change Windows Defender Exploit Protection Settings in Windows 10  

Page 1 of 2 12 LastLast
    Change Windows Defender Exploit Protection Settings in Windows 10

    Change Windows Defender Exploit Protection Settings in Windows 10

    How to Change Windows Defender Exploit Protection Settings in Windows 10
    Published by Category: Security System
    05 Mar 2020
    Designer Media Ltd


    How to Change Windows Defender Exploit Protection Settings in Windows 10


    Starting with Windows 10 build 16232, you can now audit, configure, and manage Windows system and application exploit mitigation settings (EMET EOL) right from Windows Security.

    Exploit protection is built into Windows 10 to help protect your device against attacks. Out of the box, your device is already set up with the protection settings that work best for most people.

    Exploit protection is part of Windows Defender Exploit Guard. Exploit protection helps protect devices from malware that use exploits to spread and infect. It consists of a number of mitigations that can be applied at either the operating system level, or at the individual app level.

    You configure these settings using the Windows Defender Security Center on an individual machine, and then export the configuration as an XML file as a backup and that you can deploy to other machines.

    For more information, see also:

    This tutorial will show you how to change the Exploit protection settings for your system and programs from Windows Security in Windows 10.

    You must be signed in as an administrator to change Exploit Protection settings.



    Contents

    • Option One: To Customize System Settings for Exploit Protection
    • Option Two: To Add Program to Customize in Program Settings for Exploit Protection
    • Option Three: To Remove Program in Program Settings for Exploit Protection
    • Option Four: To Customize Program Settings for Exploit Protection






    OPTION ONE

    To Customize System Settings for Exploit Protection


    1 Open Windows Security, and click/tap on the App & browser control icon. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-1.jpg

    2 Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-2.png

    3 Click/tap on System settings in Exploit protection, and customize the system settings how you want. (see screenshots below)

    Some changes will require you to restart the computer to apply.


    Change Windows Defender Exploit Protection Settings in Windows 10-restart.png

    Change Windows Defender Exploit Protection Settings in Windows 10-settings.png
    Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-3.png Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-4.png

    4 After each setting change, click/tap on Yes when prompted by UAC to approve.

    5 When finished, you can close Windows Security if you like.






    OPTION TWO

    To Add Program to Customize in Program Settings for Exploit Protection


    1 Open Windows Security, and click/tap on the App & browser control icon. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-1.jpg

    2 Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-2.png

    3 Click/tap on Program settings in Exploit protection, click/tap on the Add program to customize + button, and click/tap on Choose exact file path. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_add_program_settings-1.png

    4 Navigate to and select the .exe file (ex: "notepad.exe") you want to add, and click/tap on Open. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_add_program_settings-2.png

    5 You can now go to step 5 in Option Four below to customize the program settings for this .exe file (ex: "notepad.exe"). (see screenshots below)

    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_add_program_settings-3.png Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_add_program_settings-4.png






    OPTION THREE

    To Remove Program in Program Settings for Exploit Protection


    1 Open Windows Security, and click/tap on the App & browser control icon. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-1.jpg

    2 Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-2.png

    3 Click/tap on Program settings in Exploit protection. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_program_settings.png

    4 Click/tap on a listed program (ex: "excel.exe") you want to remove, and click/tap on the Remove button. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_remove_program_settings.png

    5 Click/tap on Yes when prompted by UAC to approve.

    6 When finished, you can close Windows Security if you like.






    OPTION FOUR

    To Customize Program Settings for Exploit Protection


    1 Open Windows Security, and click/tap on the App & browser control icon. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-1.jpg

    2 Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-windows_defender_exploit_protection-2.png

    3 Click/tap on Program settings in Exploit protection. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_program_settings.png

    4 Click/tap on a listed program (ex: "excel.exe") you want to customize settings for, and click/tap on the Edit button. (see screenshot below)

    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_edit_program_settings-1.png

    5 Edit the program settings how you want for this program, and click/tap on the Apply button at the bottom when finished. (see screenshots below)

    Any changes will require you to restart the program if currently open.


    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_edit_program_settings-2.png Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_edit_program_settings-3.png
    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_edit_program_settings-4.png Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_edit_program_settings-5.png
    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_edit_program_settings-6.png Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_edit_program_settings-7.png
    Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_edit_program_settings-8.png Change Windows Defender Exploit Protection Settings in Windows 10-exploit_protection_edit_program_settings-9.png

    6 Click/tap on Yes when prompted by UAC to approve.

    7 When finished, you can close Windows Security if you like.


    That's it,
    Shawn



  1. Fisher Mann's Avatar
    Posts : 475
    Win 10 Pro x64 19631 Fast
       #1

    Shawn: Being unfamiliar with the Exploit Protections displayed in the "System Settings", I looked them up and it seems like they should all be set to ON by Default? Was wondering why M$ didn't have them set this way or is there a good reason they aren't? Finally with these set ON will they possibly interfere with other malware protection e.g. Malwarebytes? TKS for posting the tut.
      My Computers

  2. Brink's Avatar
    Posts : 48,768
    64-bit Windows 10 Pro for Workstations build 19635
    Thread Starter
       #2

    Hello Fisher Mann, :)

    This is the same as EMET below, but just now built-in to Windows 10 and able to set in Windows Defender Security Center.

    Enhanced Mitigation Experience Toolkit (EMET) for Windows 10 - Windows 10 Forums

    It's not suppose to interfere with other AV or security programs, but you never know with 3rd party software.
      My Computers

  3. Fisher Mann's Avatar
    Posts : 475
    Win 10 Pro x64 19631 Fast
       #3

    Thanks Shawn. Looks like I have a lot more reading ahead of me. I wouldn't think they would release this in any upcoming public build, but I could easily be mistaken.
      My Computers

  4. Brink's Avatar
    Posts : 48,768
    64-bit Windows 10 Pro for Workstations build 19635
    Thread Starter
       #4

    It will be available to the public in the Windows 10 Fall Creators Update arriving sometime in Fall 2017.
      My Computers

  5. Fisher Mann's Avatar
    Posts : 475
    Win 10 Pro x64 19631 Fast
       #5

    Brink said:
    It will be available to the public in the Windows 10 Fall Creators Update arriving sometime in Fall 2017.
    Oh well I guess M$ knows what they're doing. Toggled all of them on, so far so good. Will post here if anything weird happens.
      My Computers

  6. Brink's Avatar
    Posts : 48,768
    64-bit Windows 10 Pro for Workstations build 19635
    Thread Starter
       #6

      My Computers


  7. Cliff S's Avatar
    Posts : 24,302
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       #7

    I'll stick with MBAE Beta(it is free, but now since version 1.10.x.x.x is also a free(no trial))
    It's UI is simpler to navigate, and easier to use, as you just tick or add, and let it make the settings for your software.
    Plus they preset it to what the average user needs, and, if you know what you're doing(and I don't) you can tighten it up more.

    Microsoft has made a pretty UI, but it really is more difficult to set up.
      My Computers

  8. Steve C's Avatar
    Posts : 5,255
    Windows 10 Pro 64 bit
       #8

    I just had a look at these settings. I haven't set anything. Force Randomisation for Images is off - should it be on?

    Some program overrides have been set. I didn't make them so are these settings normal? See below:

    Change Windows Defender Exploit Protection Settings in Windows 10-image.png
      My Computers


  9. Posts : 46
    win10 home 64 bit
       #9

    odd question. i use win10 home 1709 (with all updates) + 3rd party security suite and my screen looks different. when i hit app& browser control-> exploit protection settings, the page just says program settings (no system settings in sight).

    everything has 3 options... off by default, on, add program to customise. there's a blue link at the bottom that says "use default (<%1!s!>)" clicking that just saves a xml file.

    i changed something from "off by default" to on and there's a bright red text saying "%1!s! %2!d! system overrides" that persists until i close the security centre, even if i flip it bak to "off by default". re-opening it doesn't show the red text. wonder if i screwed up anything by changing the options.
    Change Windows Defender Exploit Protection Settings in Windows 10-wdeg.jpg
      My Computer


 
Page 1 of 2 12 LastLast

Tutorial Categories

Change Windows Defender Exploit Protection Settings in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


Related Threads
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:39.
Find Us




Windows 10 Forums