NAME
Set-MpPreference
SYNTAX
Set-MpPreference [-ExclusionPath ] [-ExclusionExtension ] [-ExclusionProcess ]
[-RealTimeScanDirection {Both | Incoming | Outcoming}] [-QuarantinePurgeItemsAfterDelay ]
[-RemediationScheduleDay {Everyday | Sunday | Monday | Tuesday | Wednesday | Thursday | Friday | Saturday |
Never}] [-RemediationScheduleTime ] [-ReportingAdditionalActionTimeOut ]
[-ReportingCriticalFailureTimeOut ] [-ReportingNonCriticalTimeOut ] [-ScanAvgCPULoadFactor ]
[-CheckForSignaturesBeforeRunningScan ] [-ScanPurgeItemsAfterDelay ] [-ScanOnlyIfIdleEnabled ]
[-ScanParameters {QuickScan | FullScan}] [-ScanScheduleDay {Everyday | Sunday | Monday | Tuesday | Wednesday |
Thursday | Friday | Saturday | Never}] [-ScanScheduleQuickScanTime ] [-ScanScheduleTime ]
[-SignatureFirstAuGracePeriod ] [-SignatureAuGracePeriod ]
[-SignatureDefinitionUpdateFileSharesSources ] [-SignatureDisableUpdateOnStartupWithoutEngine ]
[-SignatureFallbackOrder ] [-SharedSignaturesPath ] [-SignatureScheduleDay {Everyday | Sunday |
Monday | Tuesday | Wednesday | Thursday | Friday | Saturday | Never}] [-SignatureScheduleTime ]
[-SignatureUpdateCatchupInterval ] [-SignatureUpdateInterval ] [-MAPSReporting {Disabled | Basic |
Advanced}] [-SubmitSamplesConsent {AlwaysPrompt | SendSafeSamples | NeverSend | SendAllSamples}]
[-DisableAutoExclusions ] [-DisablePrivacyMode ] [-RandomizeScheduleTaskTimes ]
[-DisableBehaviorMonitoring ] [-DisableIntrusionPreventionSystem ] [-DisableIOAVProtection ]
[-DisableRealtimeMonitoring ] [-DisableScriptScanning ] [-DisableArchiveScanning ]
[-DisableCatchupFullScan ] [-DisableCatchupQuickScan ] [-DisableEmailScanning ]
[-DisableRemovableDriveScanning ] [-DisableRestorePoint ]
[-DisableScanningMappedNetworkDrivesForFullScan ] [-DisableScanningNetworkFiles ] [-UILockdown ]
[-ThreatIDDefaultAction_Ids ] [-ThreatIDDefaultAction_Actions {Clean | Quarantine | Remove | Allow |
UserDefined | NoAction | Block}] [-UnknownThreatDefaultAction {Clean | Quarantine | Remove | Allow | UserDefined |
NoAction | Block}] [-LowThreatDefaultAction {Clean | Quarantine | Remove | Allow | UserDefined | NoAction |
Block}] [-ModerateThreatDefaultAction {Clean | Quarantine | Remove | Allow | UserDefined | NoAction | Block}]
[-HighThreatDefaultAction {Clean | Quarantine | Remove | Allow | UserDefined | NoAction | Block}]
[-SevereThreatDefaultAction {Clean | Quarantine | Remove | Allow | UserDefined | NoAction | Block}] [-Force]
[-DisableBlockAtFirstSeen ] [-PUAProtection {Disabled | Enabled | AuditMode}] [-CloudBlockLevel {Default |
Moderate | High | HighPlus | ZeroTolerance}] [-CloudExtendedTimeout ] [-EnableNetworkProtection {Disabled
| Enabled | AuditMode}] [-EnableControlledFolderAccess {Disabled | Enabled | AuditMode | BlockDiskModificationOnly
| AuditDiskModificationOnly}] [-AttackSurfaceReductionOnlyExclusions ]
[-ControlledFolderAccessAllowedApplications ] [-ControlledFolderAccessProtectedFolders ]
[-AttackSurfaceReductionRules_Ids ] [-AttackSurfaceReductionRules_Actions {Disabled | Enabled |
AuditMode}] [-EnableLowCpuPriority ] [-EnableFileHashComputation ] [-CimSession ]
[-ThrottleLimit ] [-AsJob] []
PARAMETERS
-AsJob
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-AttackSurfaceReductionOnlyExclusions
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-AttackSurfaceReductionRules_Actions
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-AttackSurfaceReductionRules_Ids
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-CheckForSignaturesBeforeRunningScan
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases csbr
Dynamic? false
-CimSession
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases Session
Dynamic? false
-CloudBlockLevel
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-CloudExtendedTimeout
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases cloudextimeout
Dynamic? false
-ControlledFolderAccessAllowedApplications
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-ControlledFolderAccessProtectedFolders
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-DisableArchiveScanning
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases darchsc
Dynamic? false
-DisableAutoExclusions
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dae
Dynamic? false
-DisableBehaviorMonitoring
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dbm
Dynamic? false
-DisableBlockAtFirstSeen
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dbaf
Dynamic? false
-DisableCatchupFullScan
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dcfsc
Dynamic? false
-DisableCatchupQuickScan
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dcqsc
Dynamic? false
-DisableEmailScanning
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases demsc
Dynamic? false
-DisableIOAVProtection
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dioavp
Dynamic? false
-DisableIntrusionPreventionSystem
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dips
Dynamic? false
-DisablePrivacyMode
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dpm
Dynamic? false
-DisableRealtimeMonitoring
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases drtm
Dynamic? false
-DisableRemovableDriveScanning
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases drdsc
Dynamic? false
-DisableRestorePoint
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases drp
Dynamic? false
-DisableScanningMappedNetworkDrivesForFullScan
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dsmndfsc
Dynamic? false
-DisableScanningNetworkFiles
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dsnf
Dynamic? false
-DisableScriptScanning
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases dscrptsc
Dynamic? false
-EnableControlledFolderAccess
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-EnableFileHashComputation
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases efhc
Dynamic? false
-EnableLowCpuPriority
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases elcp
Dynamic? false
-EnableNetworkProtection
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-ExclusionExtension
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-ExclusionPath
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-ExclusionProcess
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-Force
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-HighThreatDefaultAction
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases htdefac
Dynamic? false
-LowThreatDefaultAction
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases ltdefac
Dynamic? false
-MAPSReporting
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-ModerateThreatDefaultAction
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases mtdefac
Dynamic? false
-PUAProtection
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-QuarantinePurgeItemsAfterDelay
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases qpiad
Dynamic? false
-RandomizeScheduleTaskTimes
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases rstt
Dynamic? false
-RealTimeScanDirection
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases rtsd
Dynamic? false
-RemediationScheduleDay
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases rsd
Dynamic? false
-RemediationScheduleTime
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases rst
Dynamic? false
-ReportingAdditionalActionTimeOut
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases raat
Dynamic? false
-ReportingCriticalFailureTimeOut
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases rcto
Dynamic? false
-ReportingNonCriticalTimeOut
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases rncto
Dynamic? false
-ScanAvgCPULoadFactor
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases saclf
Dynamic? false
-ScanOnlyIfIdleEnabled
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases soiie
Dynamic? false
-ScanParameters
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-ScanPurgeItemsAfterDelay
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases spiad
Dynamic? false
-ScanScheduleDay
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases scsd
Dynamic? false
-ScanScheduleQuickScanTime
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases scsqst
Dynamic? false
-ScanScheduleTime
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases scst
Dynamic? false
-SevereThreatDefaultAction
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases stdefac
Dynamic? false
-SharedSignaturesPath
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases ssp, SecurityIntelligenceLocation, ssl
Dynamic? false
-SignatureAuGracePeriod
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases sigagp
Dynamic? false
-SignatureDefinitionUpdateFileSharesSources
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases sigdufss
Dynamic? false
-SignatureDisableUpdateOnStartupWithoutEngine
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases sigduoswo
Dynamic? false
-SignatureFallbackOrder
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases sfo
Dynamic? false
-SignatureFirstAuGracePeriod
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases sigfagp
Dynamic? false
-SignatureScheduleDay
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases sigsd
Dynamic? false
-SignatureScheduleTime
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases sigst
Dynamic? false
-SignatureUpdateCatchupInterval
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases siguci
Dynamic? false
-SignatureUpdateInterval
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases sigui
Dynamic? false
-SubmitSamplesConsent
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-ThreatIDDefaultAction_Actions
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases tiddefaca
Dynamic? false
-ThreatIDDefaultAction_Ids
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases tiddefaci
Dynamic? false
-ThrottleLimit
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-UILockdown
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases None
Dynamic? false
-UnknownThreatDefaultAction
Required? false
Position? Named
Accept pipeline input? false
Parameter set name Set0
Aliases unktdefac
Dynamic? false
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
None
OUTPUTS
System.Object
ALIASES
None
REMARKS
Get-Help cannot find the Help files for this cmdlet on this computer. It is displaying only partial help.
-- To download and install Help files for the module that includes this cmdlet, use Update-Help.