Published by


Brink's Avatar
Administrator

Posts: 25,241

Show Printable Version 


How to Export and Import Windows Defender Exploit Protection Settings in Windows 10

information   Information
Starting with Windows 10 build 16232, you can now audit, configure, and manage Windows system and application exploit mitigation settings (EMET EOL) right from the Windows Defender Security Center.

Exploit protection is built into Windows 10 to help protect your device against attacks. Out of the box, your device is already set up with the protection settings that work best for most people.

Exploit protection is part of Windows Defender Exploit Guard. Exploit protection helps protect devices from malware that use exploits to spread and infect. It consists of a number of mitigations that can be applied at either the operating system level, or at the individual app level.

You configure these settings using the Windows Defender Security Center on an individual machine, and then export the configuration as an XML file as a backup and that you can deploy to other machines. When you export the settings, all settings for both app-level and system-level mitigations are saved. This means you don't need to export a file from both the System settings and Program settings sections - either section will export all settings.

For more information, see also:

This tutorial will show you how to export (backup) and import (restore) your Windows Defender Exploit protection settings in Windows 10.

You must be signed in as an administrator to export and import Exploit protection settings.

CONTENTS:
  • Option One: Export Windows Defender Exploit Protection Settings in Windows Defender Security Center
  • Option Two: Export Windows Defender Exploit Protection Settings in PowerShell
  • Option Three: Import Windows Defender Exploit Protection Settings in PowerShell





Export and Import Exploit Protection Settings in Windows 10 OPTION ONE Export and Import Exploit Protection Settings in Windows 10
Export Windows Defender Exploit Protection Settings in Windows Defender Security Center

1. Open the Windows Defender Security Center, and click/tap on the App & browser control icon. (see screenshot below)

Name:  Export_Windows_Defendeer_Exploit_protection_settings-1.jpg
Views: 138
Size:  40.8 KB

2. Click/tap on the Exploit protection settings link at the bottom. (see screenshot below)

Name:  Export_Windows_Defendeer_Exploit_protection_settings-2.png
Views: 126
Size:  31.4 KB

3. Make any changes you want to the Windows Defender Exploit settings.

4. Click/tap on the Export settings link at the bottom. (see screenshot below)

Name:  Export_Windows_Defendeer_Exploit_protection_settings-3.png
Views: 127
Size:  37.3 KB

5. Navigate to where you want to save the XML file to, type a File name you want for the XML file, and click/tap on Save. (see screenshot below)

Name:  Export_Windows_Defendeer_Exploit_protection_settings-4.png
Views: 121
Size:  34.5 KB

6. When finished, you can close the Windows Defender Security Center if you like.






Export and Import Exploit Protection Settings in Windows 10 OPTION TWO Export and Import Exploit Protection Settings in Windows 10
Export Windows Defender Exploit Protection Settings in PowerShell

1. Make any changes you want to the Windows Defender Exploit settings.

2. Open an elevated PowerShell.

3. Copy and paste the command below into the elevated PowerShell, and press Enter. (see screenshot below)

Get-ProcessMitigation -RegistryConfigFilePath "$env:UserProfile\Desktop\ExploitProtectionSettings.xml

Click image for larger version. 

Name:	Export_Windows_Defendeer_Exploit_protection_settings_PowerShell.png 
Views:	4 
Size:	22.8 KB 
ID:	160221

4. When finished, you can close the elevated PowerShell if you like.

5. You can now move the ExploitProtectionSettings.xml file exported on your desktop to where you like to keep it saved at.






Export and Import Exploit Protection Settings in Windows 10 OPTION THREE Export and Import Exploit Protection Settings in Windows 10
Import Windows Defender Exploit Protection Settings in PowerShell

1. Open an elevated PowerShell.

2. Type the command below into the elevated PowerShell, and press Enter. (see screenshot below)

Set-ProcessMitigation -PolicyFilePath "Full path of XML file"

Note   Note
Substitute Full path of XML file in the command above with the actual full path of the XML file that you exported using Option One or Option Two above.

For example: Set-ProcessMitigation -PolicyFilePath "C:\Users\Brink\Desktop\ExploitProtectionSettings.xml"
Click image for larger version. 

Name:	Import_Windows_Defendeer_Exploit_protection_settings_PowerShell.png 
Views:	3 
Size:	21.6 KB 
ID:	160220

3. When finished, you can close the elevated PowerShell if you like.


That's it,
Shawn