Potentially Unwanted Applications

Scenario description

The Potentially Unwanted Applications (PUA) protection feature in Microsoft Defender Antivirus can identify and block PUAs from downloading and installing on endpoints in your network. These applications are not considered viruses, malware, or other types of threats, but might perform actions on endpoints that adversely affect their performance or use.

Scenario requirements and setup


  1. Go to http://www.amtso.org/feature-settings-check-potentially-unwanted-applications/
  2. Click "Download the Potentially Unwanted Application ‘test’ file" link
  3. After downloading the file, it is automatically blocked and prevented from running.