Windows 10: Change Windows Defender Exploit Protection Settings in Windows 10  

Page 1 of 2 12 LastLast
    Change Windows Defender Exploit Protection Settings in Windows 10

    Change Windows Defender Exploit Protection Settings in Windows 10

    How to Change Windows Defender Exploit Protection Settings in Windows 10
    Published by Category: Security System
    06 Mar 2018
    Designer Media Ltd

    Published by


    Brink's Avatar
    Administrator

    Posts: 31,264

    Show Printable Version 


    How to Change Windows Defender Exploit Protection Settings in Windows 10


    Starting with Windows 10 build 16232, you can now audit, configure, and manage Windows system and application exploit mitigation settings (EMET EOL) right from the Windows Defender Security Center.

    Exploit protection is built into Windows 10 to help protect your device against attacks. Out of the box, your device is already set up with the protection settings that work best for most people.

    Exploit protection is part of Windows Defender Exploit Guard. Exploit protection helps protect devices from malware that use exploits to spread and infect. It consists of a number of mitigations that can be applied at either the operating system level, or at the individual app level.

    You configure these settings using the Windows Defender Security Center on an individual machine, and then export the configuration as an XML file as a backup and that you can deploy to other machines.

    For more information, see also:

    This tutorial will show you how to change the Exploit protection settings for your system and programs from the Windows Defender Security Center in Windows 10.

    You must be signed in as an administrator to change Exploit Protection settings.


     CONTENTS:

    • Option One: To Customize System Settings for Exploit Protection
    • Option Two: To Add Program to Customize in Program Settings for Exploit Protection
    • Option Three: To Remove Program in Program Settings for Exploit Protection
    • Option Four: To Customize Program Settings for Exploit Protection





    Change Windows Defender Exploit Protection Settings in Windows 10 OPTION ONE Change Windows Defender Exploit Protection Settings in Windows 10
    To Customize System Settings for Exploit Protection

    1. Open the Windows Defender Security Center, and click/tap on the App & browser control icon. (see screenshot below)

    Name:  Windows_Defender_Exploit_protection-1.jpg
Views: 3587
Size:  41.5 KB

    2. Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

    Name:  Windows_Defender_Exploit_protection-2.png
Views: 3245
Size:  34.6 KB

    3. Click/tap on System settings in Exploit protection, and customize the system settings how you want. (see screenshots below)

    Some changes will require you to restart the computer to apply.
    Name:  restart.png
Views: 3056
Size:  7.4 KB

    Name:  settings.png
Views: 3025
Size:  2.6 KB
    Name:  Windows_Defender_Exploit_protection-3.png
Views: 3220
Size:  37.9 KB Name:  Windows_Defender_Exploit_protection-4.png
Views: 3167
Size:  37.7 KB

    4. After each setting change, click/tap on Yes when prompted by UAC to approve.

    5. When finished, you can close Windows Defender Security Center if you like.






    Change Windows Defender Exploit Protection Settings in Windows 10 OPTION TWO Change Windows Defender Exploit Protection Settings in Windows 10
    To Add Program to Customize in Program Settings for Exploit Protection

    1. Open the Windows Defender Security Center, and click/tap on the App & browser control icon. (see screenshot below)

    Name:  Windows_Defender_Exploit_protection-1.jpg
Views: 3587
Size:  41.5 KB

    2. Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

    Name:  Windows_Defender_Exploit_protection-2.png
Views: 3245
Size:  34.6 KB

    3. Click/tap on Program settings in Exploit protection, click/tap on the Add program to customize + button, and click/tap on Choose exact file path. (see screenshot below)

    Name:  Exploit_Protection_Add_program_settings-1.png
Views: 3069
Size:  35.2 KB

    4. Navigate to and select the .exe file (ex: "notepad.exe") you want to add, and click/tap on Open. (see screenshot below)

    Name:  Exploit_Protection_Add_program_settings-2.png
Views: 3101
Size:  55.2 KB

    5. You can now go to step 5 in Option Four below to customize the program settings for this .exe file (ex: "notepad.exe"). (see screenshots below)

    Name:  Exploit_Protection_Add_program_settings-3.png
Views: 3185
Size:  22.9 KB Name:  Exploit_Protection_Add_program_settings-4.png
Views: 3090
Size:  32.9 KB






    Change Windows Defender Exploit Protection Settings in Windows 10 OPTION THREE Change Windows Defender Exploit Protection Settings in Windows 10
    To Remove Program in Program Settings for Exploit Protection

    1. Open the Windows Defender Security Center, and click/tap on the App & browser control icon. (see screenshot below)

    Name:  Windows_Defender_Exploit_protection-1.jpg
Views: 3587
Size:  41.5 KB

    2. Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

    Name:  Windows_Defender_Exploit_protection-2.png
Views: 3245
Size:  34.6 KB

    3. Click/tap on Program settings in Exploit protection. (see screenshot below)

    Name:  Exploit_Protection_Program_settings.png
Views: 3117
Size:  27.9 KB

    4. Click/tap on a listed program (ex: "excel.exe") you want to remove, and click/tap on the Remove button. (see screenshot below)

    Name:  Exploit_Protection_Remove_program_settings.png
Views: 3111
Size:  47.7 KB

    5. Click/tap on Yes when prompted by UAC to approve.

    6. When finished, you can close Windows Defender Security Center if you like.






    Change Windows Defender Exploit Protection Settings in Windows 10 OPTION FOUR Change Windows Defender Exploit Protection Settings in Windows 10
    To Customize Program Settings for Exploit Protection

    1. Open the Windows Defender Security Center, and click/tap on the App & browser control icon. (see screenshot below)

    Name:  Windows_Defender_Exploit_protection-1.jpg
Views: 3587
Size:  41.5 KB

    2. Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

    Name:  Windows_Defender_Exploit_protection-2.png
Views: 3245
Size:  34.6 KB

    3. Click/tap on Program settings in Exploit protection. (see screenshot below)

    Name:  Exploit_Protection_Program_settings.png
Views: 3117
Size:  27.9 KB

    4. Click/tap on a listed program (ex: "excel.exe") you want to customize settings for, and click/tap on the Edit button. (see screenshot below)

    Name:  Exploit_Protection_Edit_program_settings-1.png
Views: 3088
Size:  47.7 KB

    5. Edit the program settings how you want for this program, and click/tap on the Apply button at the bottom when finished. (see screenshots below)

    Any changes will require you to restart the program if currently open.

    Name:  Exploit_Protection_Edit_program_settings-2.png
Views: 3073
Size:  30.2 KB Name:  Exploit_Protection_Edit_program_settings-3.png
Views: 3062
Size:  28.1 KB
    Name:  Exploit_Protection_Edit_program_settings-4.png
Views: 3097
Size:  30.1 KB Name:  Exploit_Protection_Edit_program_settings-5.png
Views: 3057
Size:  27.5 KB
    Name:  Exploit_Protection_Edit_program_settings-6.png
Views: 3063
Size:  32.9 KB Name:  Exploit_Protection_Edit_program_settings-7.png
Views: 3075
Size:  28.8 KB
    Name:  Exploit_Protection_Edit_program_settings-8.png
Views: 3061
Size:  31.0 KB Name:  Exploit_Protection_Edit_program_settings-9.png
Views: 3090
Size:  35.0 KB

    6. Click/tap on Yes when prompted by UAC to approve.

    7. When finished, you can close Windows Defender Security Center if you like.


    That's it,
    Shawn



  1. Posts : 310
    Win 10 Pro x64 17133.1 Slow
       01 Jul 2017 #1

    Shawn: Being unfamiliar with the Exploit Protections displayed in the "System Settings", I looked them up and it seems like they should all be set to ON by Default? Was wondering why M$ didn't have them set this way or is there a good reason they aren't? Finally with these set ON will they possibly interfere with other malware protection e.g. Malwarebytes? TKS for posting the tut.
      My ComputersSystem Spec


  2. Posts : 31,264
    64-bit Windows 10 Pro build 18214
    Thread Starter
       01 Jul 2017 #2

    Hello Fisher Mann, :)

    This is the same as EMET below, but just now built-in to Windows 10 and able to set in Windows Defender Security Center.

    Enhanced Mitigation Experience Toolkit (EMET) for Windows 10 - Windows 10 Forums

    It's not suppose to interfere with other AV or security programs, but you never know with 3rd party software.
      My ComputersSystem Spec


  3. Posts : 310
    Win 10 Pro x64 17133.1 Slow
       02 Jul 2017 #3

    Thanks Shawn. Looks like I have a lot more reading ahead of me. I wouldn't think they would release this in any upcoming public build, but I could easily be mistaken.
      My ComputersSystem Spec


  4. Posts : 31,264
    64-bit Windows 10 Pro build 18214
    Thread Starter
       02 Jul 2017 #4

    It will be available to the public in the Windows 10 Fall Creators Update arriving sometime in Fall 2017.
      My ComputersSystem Spec


  5. Posts : 310
    Win 10 Pro x64 17133.1 Slow
       02 Jul 2017 #5

    Brink said: View Post
    It will be available to the public in the Windows 10 Fall Creators Update arriving sometime in Fall 2017.
    Oh well I guess M$ knows what they're doing. Toggled all of them on, so far so good. Will post here if anything weird happens.
      My ComputersSystem Spec


  6. Posts : 31,264
    64-bit Windows 10 Pro build 18214
    Thread Starter
       02 Jul 2017 #6

      My ComputersSystem Spec


  7. Posts : 21,206
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       26 Jul 2017 #7

    I'll stick with MBAE Beta(it is free, but now since version 1.10.x.x.x is also a free(no trial))
    It's UI is simpler to navigate, and easier to use, as you just tick or add, and let it make the settings for your software.
    Plus they preset it to what the average user needs, and, if you know what you're doing(and I don't) you can tighten it up more.

    Microsoft has made a pretty UI, but it really is more difficult to set up.
      My ComputersSystem Spec

  8.    10 Dec 2017 #8

    I just had a look at these settings. I haven't set anything. Force Randomisation for Images is off - should it be on?

    Some program overrides have been set. I didn't make them so are these settings normal? See below:

    Click image for larger version. 

Name:	image.png 
Views:	405 
Size:	43.4 KB 
ID:	167581
      My ComputersSystem Spec

  9.    20 Mar 2018 #9

    odd question. i use win10 home 1709 (with all updates) + 3rd party security suite and my screen looks different. when i hit app& browser control-> exploit protection settings, the page just says program settings (no system settings in sight).

    everything has 3 options... off by default, on, add program to customise. there's a blue link at the bottom that says "use default (<%1!s!>)" clicking that just saves a xml file.

    i changed something from "off by default" to on and there's a bright red text saying "%1!s! %2!d! system overrides" that persists until i close the security centre, even if i flip it bak to "off by default". re-opening it doesn't show the red text. wonder if i screwed up anything by changing the options.
    Click image for larger version. 

Name:	wdeg.jpg 
Views:	84 
Size:	213.9 KB 
ID:	181588
      My ComputerSystem Spec


 
Page 1 of 2 12 LastLast

Tutorial Categories

Change Windows Defender Exploit Protection Settings in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Xbox Windows Phone


Related Threads
System protection (if turned on) is a feature that allows you to perform a system restore that takes your PC back to an earlier point in time, called a system restore point. This can be handy if your PC isn't working well and you recently installed...
My MMOs won't load, causing auto reboots. In attempting to fix problem (still an issue) the fixes required modifying various settings. Windows won't let me change any settings. I navigate, click on the setting I want, click "ok" or "apply" and...
Hello, Is it possibly the Anniversary Update, which has blocked my possibilities to change the Lock Screen configuration? In Settings->Personalisation that whole option is greyed out today and I'm stuck with a lock screen, which I can't modify or...
Hello there I just installed Win 10 upgrade from Windows 7 on my computer and I am having some problems to modify system settings regarding pen and touch, specially "Flicks" settings, that I need to disable to have a better performance using a...
I am trying to learn more about the subject above, and feel sure there are some gurus out there with lots of knowledge about the System Properties in Windows Ten. I suspect many users only use this section for making a restore file. I have heard...

Tags for this Thread

Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Đ Designer Media Ltd
All times are GMT -5. The time now is 16:11.
Find Us