Potentially unwanted applications (PUA) demonstration

Applies to:

• Microsoft Defender for Endpoint Plan 2
• Microsoft Defender for Business
• Microsoft Defender for Endpoint Plan 1
• Microsoft Defender Antivirus
• Microsoft Defender for Individuals

The Potentially Unwanted Applications (PUA) protection feature in Microsoft Defender Antivirus can identify and block PUAs from downloading and installing on endpoints in your network. These applications aren't considered viruses, malware, or other types of threats, but might perform actions on endpoints that adversely affect their performance or use.

Scenario requirements and setup

• Windows 11 or Windows 10
• Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, and Windows Server 2008 R2 SP1
• macOS
• Linux
• Enable PUA protection. For more information, see the Detect and block Potentially Unwanted Applications article.
• You can also download and use the PowerShell script to enable this setting and others.

Scenario

1. Go to http://www.amtso.org/feature-settings-check-potentially-unwanted-applications/
2. Click "Download the Potentially Unwanted Application 'test' file" link
3. After downloading the file, it's automatically blocked and prevented from running.

See also

Detect and block Potentially Unwanted Applications

Microsoft Defender for Endpoint - demonstration scenarios