Configure Microsoft Defender Antivirus features

You can configure Microsoft Defender Antivirus with a number of tools, such as:

• Microsoft Endpoint Manager (which includes Microsoft Intune and Microsoft Endpoint Configuration Manager)
• Group Policy
• PowerShell cmdlets
• Windows Management Instrumentation (WMI)
• Tenant attach

The following broad categories of features can be configured:

• Cloud-delivered protection. See Cloud-delivered protection and Microsoft Defender Antivirus
• Always-on real-time protection, including behavioral, heuristic, and machine-learning-based protection. See Configure behavioral, heuristic, and real-time protection.
• How end users interact with the client on individual endpoints. See the following resources:
  • Prevent users from seeing or interacting with the Microsoft Defender Antivirus user interface
  • Prevent or allow users to locally modify Microsoft Defender Antivirus policy settings