Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

Categories Active Directory
Created by Bill Krauss (Applied Tech)
Created on Mar 4, 2022

Active Directory: GPO that Disable Windows Defender

This will output any policy by name that is blocking Windows Defender in Group Policy.

Query

GroupPolicySettings[?KeyPath == `Policy.Turn off Windows Defender Antivirus.Category`].Policy

  • Attach files
  • Bill Krauss (Applied Tech)
    Reply
    |
    Mar 4, 2022

    Correction

    GroupPolicySettings[?KeyPath == `Policy.Turn off Windows Defender Antivirus.State` && Value == 'Enabled'].Policy