The Exploit protection functionality helps users protect their computers from the malware that uses various security exploits to invade your computer. It works well to protect a user’s PC. Windows 10 and allows users to add or remove an app from the Exploit protection settings in Windows Security. Let’s assume that you are handing over your computer to your friend or kid for a couple of days, and you do not want to allow them to change any setting. You have two options. First, you can hide the App & browser control window. Second, you can disable Exploit protection settings individually.
Prevent users from modifying Exploit protection settings via GPEDIT
To prevent users from modifying Exploit protection settings in Windows 10, follow these steps- Let’s learn more about these steps in detail. At first, press the Win+R button to open the Run prompt. Type gpedit.msc and press the Enter button to open Local Group Policy Editor. After that, navigate to this path- Here you will see a setting called Prevent users from modifying settings. Double-click on it and select the Enabled option.
At last, click on Apply and OK buttons, respectively. You can do the same with Registry Editor as well. If you are planning to Registry Editor, it is recommended to backup all Registry files and create a System Restore point.
Block users from adding or removing apps in Exploit protection settings via REGEDIT
To block users from adding or removing apps in Exploit protection settings, follow these steps- Let’s delve into these steps in detail. At first, press Win+R, type regedit, and press the Enter button. Click on the Yes button in the UAC popup window. After that, navigate to the following path- Right-click on Windows Defender Security Center > New > Key and name it as App and Browser protection. After that, right-click on App and Browser protection > New > DWORD (32-bit) Value and name it as DisallowExploitProtectionOverride.
Double-click on it to set the Value data as 1.
Click the OK button to save the change. Hope this guide helps.