Description: Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.

Why It's Important: Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.

Learn More

Description: The company name that is displayed to the users. CompanyName is required for both EnableCustomizedToasts and EnableInAppCustomization. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display the contact options. Value type is string. Supported operations are Add, Get, Replace and Delete.

Why It's Important: This policy displays the company name in Windows Security, helping SHIELD clearly identify privileged devices and reinforce trust in official security notifications.

Learn More

Description: Disable the Clear TPM button in Windows Security.

Supported values:

Why It's Important: This policy removes the option to clear the TPM from Windows Security, ensuring SHIELD preserves hardware-based keys and prevents users from accidentally or maliciously disabling device protection.

Learn More

Description: Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete.

Why It's Important: This policy disables the Family options area in Windows Security, allowing SHIELD to reduce user confusion and keep the security interface focused on enterprise-managed controls.

Learn More

Description: The email address that is displayed to users. The default mail application is used to initiate email actions. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display contact options. Value type is string. Supported operations are Add, Get, Replace and Delete.

Why It's Important: This policy displays a trusted support email in Windows Security, allowing SHIELD users to contact the official help channel directly and avoid reliance on unverified sources.

Learn More

Description: Enable this policy to display your company name and contact options in the notifications. If you disable or do not configure this setting, or do not provide CompanyName and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will display a default notification text. Value type is integer. Supported operations are Add, Get, Replace, and Delete.

Why It's Important: This policy enables customized notifications in Windows Security, allowing SHIELD to display the company name and trusted contact details so users can reach official support directly.

Learn More

Description: Enable this policy to have your company name and contact options displayed in a contact card fly out in Windows Defender Security Center. If you disable or do not configure this setting, or do not provide CompanyName and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will not display the contact card fly out notification. Value type is integer. Supported operations are Add, Get, Replace, and Delete.

Why It's Important: This policy enables in-app customization in Windows Security, allowing SHIELD to display official contact details and company information directly to users for trusted support.

Learn More

Description: The phone number or Skype ID that is displayed to users. Skype is used to initiate the call. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then devices will not display contact options. Value type is string. Supported operations are Add, Get, Replace, and Delete.

Why It's Important: This policy displays a dedicated support phone number in Windows Security, allowing SHIELD users to quickly reach help and ensuring issues are routed through trusted channels.

Learn More

Description: The help portal URL this is displayed to users. The default browser is used to initiate this action. If you disable or do not configure this setting, or do not have EnableCustomizedToasts or EnableInAppCustomization enabled, then the device will not display contact options. Value type is Value type is string. Supported operations are Add, Get, Replace, and Delete.

Why It's Important: This policy sets a custom help URL in Windows Security, allowing SHIELD to direct users to the SHI Lab support portal for guidance and faster issue resolution.

Learn More

Description: Tamper protection helps protect important security features from unwanted changes and interference. This includes real-time protection, behavior monitoring, and more. Accepts signed string to turn the feature on or off. Settings are configured with an MDM solution, such as Intune and is available in Windows 10 Enterprise E5 or equivalent subscriptions.

Why It's Important: This policy enforces Tamper Protection, allowing SHIELD to prevent attackers or users from disabling critical security features like real-time protection and behavior monitoring.

Learn More