Microsoft Defenderウイルス対策の隠し設定パラメータ PowerShell

Windows 10、Windows 11向けの無料セキュリティソフト「Microsoft Defender ウイルス対策」の設定を変更する PowerShell 隠しコマンド Get-MpPreference Set-MpPreference パラメータ一覧

Windows 10/11 に標準で実装されている Microsoft セキュリティ (Windows Defender ウイルス対策) の特殊な設定を変更できる隠し設定のパラメータ一覧です。

Get-MpPreference
Set-MpPreference

【Windows Defender 隠し設定パラメータ PowerShell】
AllowDatagramProcessingOnWinServer
AllowNetworkProtectionDownLevel
AllowNetworkProtectionOnWinServer
AttackSurfaceReductionOnlyExclusions
AttackSurfaceReductionRules_Actions
AttackSurfaceReductionRules_Ids
CheckForSignaturesBeforeRunningScan
CloudBlockLevel
CloudExtendedTimeout
ComputerID
ControlledFolderAccessAllowedApplications
ControlledFolderAccessProtectedFolders
DefinitionUpdatesChannel
DisableArchiveScanning
DisableAutoExclusions
DisableBehaviorMonitoring
DisableBlockAtFirstSeen
DisableCatchupFullScan
DisableCatchupQuickScan
DisableCpuThrottleOnIdleScans
DisableDatagramProcessing
DisableDnsOverTcpParsing
DisableDnsParsing
DisableEmailScanning
DisableFtpParsing
DisableGradualRelease
DisableHttpParsing
DisableInboundConnectionFiltering
DisableIntrusionPreventionSystem
DisableIOAVProtection
DisableNetworkProtectionPerfTelemetry
DisablePrivacyMode
DisableRdpParsing
DisableRealtimeMonitoring
DisableRemovableDriveScanning
DisableRestorePoint
DisableScanningMappedNetworkDrivesForFullScan
DisableScanningNetworkFiles
DisableScriptScanning
DisableSshParsing
DisableTlsParsing
EnableControlledFolderAccess
EnableDnsSinkhole
EnableFileHashComputation
EnableFullScanOnBatteryPower
EnableLowCpuPriority
EnableNetworkProtection
EngineUpdatesChannel
ExclusionExtension
ExclusionIpAddress
ExclusionPath
ExclusionProcess
ForceUseProxyOnly
HighThreatDefaultAction
LowThreatDefaultAction
MAPSReporting
MeteredConnectionUpdates
ModerateThreatDefaultAction
PlatformUpdatesChannel
ProxyBypass
ProxyPacUrl
ProxyServer
PUAProtection
QuarantinePurgeItemsAfterDelay
RandomizeScheduleTaskTimes
RealTimeScanDirection
RemediationScheduleDay
RemediationScheduleTime
ReportingAdditionalActionTimeOut
ReportingCriticalFailureTimeOut
ReportingNonCriticalTimeOut
ScanAvgCPULoadFactor
ScanOnlyIfIdleEnabled
ScanParameters
ScanPurgeItemsAfterDelay
ScanScheduleDay
ScanScheduleQuickScanTime
ScanScheduleTime
SchedulerRandomizationTime
SevereThreatDefaultAction
SharedSignaturesPath
SignatureAuGracePeriod
SignatureBlobFileSharesSources
SignatureBlobUpdateInterval
SignatureDefinitionUpdateFileSharesSources
SignatureDisableUpdateOnStartupWithoutEngine
SignatureFallbackOrder
SignatureFirstAuGracePeriod
SignatureScheduleDay
SignatureScheduleTime
SignatureUpdateCatchupInterval
SignatureUpdateInterval
SubmitSamplesConsent
ThreatIDDefaultAction_Actions
ThreatIDDefaultAction_Ids
ThrottleForScheduledScanOnly
TrustLabelProtectionStatus
UILockdown
UnknownThreatDefaultAction
PSComputerName

Windows Defender 設定隠しパラメータ (一部) の解説

UILockdown … [ウイルスと脅威の防止] 項目を非表示にして、ユーザーが設定を変更できないようにします。

有効化
Set-MpPreference -UILockdown $true

無効化 (デフォルト)
Set-MpPreference -UILockdown $false

関連するブログ記事