Export and Import Exploit Protection Settings in Windows 10  

    Export and Import Exploit Protection Settings in Windows 10

    Export and Import Exploit Protection Settings in Windows 10

    How to Export and Import Microsoft Defender Exploit Protection Settings in Windows 10
    Published by Category: Security System
    01 Nov 2022
    Designer Media Ltd



    How to Export and Import Microsoft Defender Exploit Protection Settings in Windows 10


    Starting with Windows 10 build 16232, you can now audit, configure, and manage Windows system and application exploit mitigation settings (EMET EOL) right from Windows Security.

    Exploit protection is built into Windows 10 to help protect your device against attacks. Out of the box, your device is already set up with the protection settings that work best for most people.

    Exploit protection helps protect devices from malware that use exploits to spread and infect. It consists of a number of mitigations that can be applied at either the operating system level, or at the individual app level.

    You configure these settings using Windows Security on an individual machine, and then export the configuration as an XML file as a backup and that you can deploy to other machines. When you export the settings, all settings for both app-level and system-level mitigations are saved. This means you don't need to export a file from both the System settings and Program settings sections - either section will export all settings.

    For more information, see also:

    This tutorial will show you how to export (backup) and import (restore) your Microsoft Defender Exploit protection settings in Windows 10.

    You must be signed in as an administrator to export and import Exploit protection settings.



    Contents

    • Option One: Export Microsoft Defender Exploit Protection Settings in Windows Security
    • Option Two: Export Microsoft Defender Exploit Protection Settings in PowerShell
    • Option Three: Import Microsoft Defender Exploit Protection Settings in PowerShell






    OPTION ONE

    Export Microsoft Defender Exploit Protection Settings in Windows Security


    1 Open Windows Security, and click/tap on the App & browser control icon. (see screenshot below)

    Export and Import Exploit Protection Settings in Windows 10-export_windows_defendeer_exploit_protection_settings-1.jpg

    2 Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

    Export and Import Exploit Protection Settings in Windows 10-export_windows_defendeer_exploit_protection_settings-2.png

    3 Make any changes you want to the Microsoft Defender Exploit settings.

    4 Click/tap on the Export settings link at the bottom. (see screenshot below)

    Export and Import Exploit Protection Settings in Windows 10-export_windows_defendeer_exploit_protection_settings-3.png

    5 Navigate to where you want to save the XML file to, type a File name you want for the XML file, and click/tap on Save. (see screenshot below)

    Export and Import Exploit Protection Settings in Windows 10-export_windows_defendeer_exploit_protection_settings-4.png

    6 When finished, you can close the Windows Defender Security Center if you like.






    OPTION TWO

    Export Microsoft Defender Exploit Protection Settings in PowerShell


    1 Make any changes you want to the Windows Defender Exploit settings.

    2 Open an elevated PowerShell.

    3 Copy and paste the command below into the elevated PowerShell, and press Enter. (see screenshot below)

    Get-ProcessMitigation -RegistryConfigFilePath "$env:UserProfile\Desktop\ExploitProtectionSettings.xml"

    Export and Import Exploit Protection Settings in Windows 10-export_windows_defendeer_exploit_protection_settings_powershell.png

    4 When finished, you can close the elevated PowerShell if you like.

    5 You can now move the ExploitProtectionSettings.xml file exported on your desktop to where you like to keep it saved at.






    OPTION THREE

    Import Microsoft Defender Exploit Protection Settings in PowerShell


    1 Open an elevated PowerShell.

    2 Type the command below into the elevated PowerShell, and press Enter. (see screenshot below)

    Set-ProcessMitigation -PolicyFilePath "Full path of XML file"

    Substitute Full path of XML file in the command above with the actual full path of the XML file that you exported using Option One or Option Two above.

    For example: Set-ProcessMitigation -PolicyFilePath "C:\Users\Brink\Desktop\ExploitProtectionSettings.xml"

    Export and Import Exploit Protection Settings in Windows 10-import_windows_defendeer_exploit_protection_settings_powershell.png

    3 When finished, you can close the elevated PowerShell if you like.


    That's it,
    Shawn Brink






  1. Posts : 2,979
    Windows 11
       #1

    Hi Shawn,

    Any idea why I get this "A positional parameter cannot be found that accepts the argument" error when I run the import command?

    Export and Import Exploit Protection Settings in Windows 10-import-exploit-protection.png
      My Computer


  2. Posts : 64,571
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    Kol12 said:
    Hi Shawn,

    Any idea why I get this "A positional parameter cannot be found that accepts the argument" error when I run the import command?
    Hello Matt,

    It looks like you missed a quote at the end of the command.
      My Computers


  3. Posts : 2,979
    Windows 11
       #3

    That was it. Thanks Shawn.
      My Computer


  4. Posts : 64,571
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #4

    Kol12 said:
    That was it. Thanks Shawn.
      My Computers


  5. Posts : 38
    Windows 10 Home 64-Bit Version 1709 Build 16299.125
       #5

    Is there a way to restore the default Program Settings for Exploit Protection without resorting to extreme methods like Resetting Windows or System Restore? Maybe someone with a fresh Windows can upload their Settings.xml here?
      My Computer


  6. Posts : 64,571
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #6

    Soyabeaner said:
    Is there a way to restore the default Program Settings for Exploit Protection without resorting to extreme methods like Resetting Windows or System Restore? Maybe someone with a fresh Windows can upload their Settings.xml here?
    Hello mate,

    Here's an export attached in a ZIP below from a fresh W10 VM to help.

    Default_ExploitProtectionSettings.zip
      My Computers


  7. Posts : 38
    Windows 10 Home 64-Bit Version 1709 Build 16299.125
       #7

    Thank you kindly!
      My Computer


  8. Posts : 64,571
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #8

    Soyabeaner said:
    Thank you kindly!
    You're most welcome.
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 13:55.
Find Us




Windows 10 Forums