Our verdict: ConfigureDefender is the quickest way to harden the antivirus already built into Windows without Group Policy or registry editing. The HIGH preset is a sensible step up; MAX blocks so much that false positives are likely. It is a settings tool for people who understand what they change.
About ConfigureDefender
ConfigureDefender is a small GUI utility by Andy Ful for viewing and changing Microsoft Defender Antivirus settings on Windows 10, Windows 11 and Windows Server 2019 or later. Many of these settings, such as Attack Surface Reduction rules, are not available in the Windows Security app. The tool changes them with PowerShell cmdlets, so it also works on Windows Home, where the Group Policy editor is missing.
You can set options one by one or apply a preset protection level: DEFAULT, HIGH, INTERACTIVE or MAX. Changing the protection level needs a reboot. The developer warns that MAX, which blocks anything suspicious through ASR, Controlled Folder Access, SmartScreen and the cloud protection level, can cause many false positives even at home. ConfigureDefender is portable and part of the developer's Hard_Configurator project.
What it does well
- Preset protection levels. Apply DEFAULT, HIGH, INTERACTIVE or MAX settings with one click.
- Attack Surface Reduction. Turn on Defender's ASR rules that the Windows Security app does not show.
- Cloud and SmartScreen levels. Raise cloud protection and set SmartScreen to block.
- Controlled Folder Access. Switch on Defender's ransomware folder protection.
- Portable. Runs from a single EXE without installation on 32-bit and 64-bit Windows.
Who it is for
Good fit
Experienced users who rely on Microsoft Defender and want stricter settings without Group Policy.
Look elsewhere
Beginners who would not recognize a false positive, and PCs managed by a company IT department.
Pros and cons
Pros
- Free and portable
- Shows Defender settings hidden in Windows Security
- Works on Windows Home without Group Policy
- Simple presets for quick hardening
Cons
- MAX level causes many false positives
- Changing the protection level requires a reboot
- Strict settings can block trusted programs until you lower them
How to install ConfigureDefender
Download ConfigureDefender.exe from the official GitHub page and run it as administrator. Note your current settings first, then try the HIGH preset and reboot. Return to DEFAULT if programs you trust start being blocked.
Questions about ConfigureDefender
Is ConfigureDefender free?
Yes. ConfigureDefender is free and is downloaded from the developer's GitHub repository.
Does ConfigureDefender replace Microsoft Defender?
No. It only changes the settings of the Microsoft Defender Antivirus already built into Windows.
Which protection level should I choose?
The developer describes MAX as very restrictive and not recommended for business use. Most home users try HIGH first.
