Home » Internet » Enable Network Protection via Group Policy in Windows 11

Internet

Enable Network Protection via Group Policy in Windows 11

Geeksdigit Team

August 1, 2026

1 View

SaveSavedRemoved 0

Network Protection is a Microsoft Defender security feature that helps protect your computer from accessing malicious websites, phishing pages, scam domains, and other unsafe internet resources. When enabled, it blocks outbound connections to known malicious domains and prevents applications from communicating with dangerous websites. This provides an additional layer of security beyond traditional antivirus protection and helps reduce the risk of malware infections and credential theft.

In Windows 11, Network Protection can be managed using the Local Group Policy Editor, making it especially useful for administrators and organizations that want to apply the setting across multiple computers. Once enabled, Microsoft Defender monitors network traffic and blocks connections to harmful websites while allowing access to trusted resources. This feature is available on supported editions of Windows and works best when Microsoft Defender Antivirus is active.

This guide explains the best methods to enable Network Protection through Group Policy in Windows 11.

What Is Network Protection?

Network Protection is part of Microsoft Defender Exploit Guard and Microsoft Defender Antivirus. It helps prevent users and applications from connecting to malicious or suspicious websites by using Microsoft’s cloud-based reputation service.

Benefits of enabling Network Protection include:

• Blocks malicious websites
• Prevents phishing attacks
• Protects against ransomware download sites
• Stops communication with known malware servers
• Improves browsing security
• Enhances Microsoft Defender protection
• Works across supported applications
• Supports enterprise security policies
• Provides cloud-based threat intelligence
• Helps reduce cyberattack risks

Method 1: Enable Network Protection Using Local Group Policy Editor

The Local Group Policy Editor provides the easiest way to enable Network Protection on Windows 11 Pro, Enterprise, and Education editions.

Once enabled, Microsoft Defender begins enforcing Network Protection according to the selected policy.

Follow these steps:

1. Press Windows + R.
2. Type gpedit.msc and press Enter.
3. Navigate to:

Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > Microsoft Defender Exploit Guard > Network Protection

4. Double-click Prevent users and apps from accessing dangerous websites.
5. Select Enabled.
6. Under Options, choose Block.
7. Click Apply.
8. Click OK.
9. Restart the computer.

Network Protection will now block connections to known malicious websites.

Method 2: Update Group Policy

After changing the policy, forcing a Group Policy refresh ensures Windows applies the new configuration immediately.

This avoids waiting for the next automatic policy update.

Follow these steps:

1. Open Command Prompt as Administrator.
2. Run:

gpupdate /force

3. Wait for the update to complete.
4. Restart the computer if prompted.
5. Verify that the policy has been applied.

The updated policy should now be active.

Method 3: Verify Microsoft Defender Antivirus Is Enabled

Network Protection relies on Microsoft Defender Antivirus. If another antivirus program has disabled Defender, Network Protection may not function.

Ensure Microsoft Defender is active before enabling the policy.

Follow these steps:

1. Open Windows Security.
2. Select Virus & threat protection.
3. Verify that Microsoft Defender Antivirus is active.
4. If another antivirus is installed, review whether Defender is available.
5. Restart the computer if you make changes.

Once Defender is active, Network Protection can operate correctly.

Method 4: Install the Latest Windows Updates

Network Protection improvements are regularly included in Windows security updates.

Keeping Windows up to date ensures maximum compatibility with Microsoft Defender features.

Follow these steps:

1. Press Windows + I to open Settings.
2. Click Windows Update.
3. Select Check for updates.
4. Install all available updates.
5. Restart the computer.
6. Verify that the policy remains enabled.

This also installs the latest Microsoft Defender security platform updates.

Method 5: Update Microsoft Defender Security Intelligence

Microsoft Defender uses security intelligence updates to identify malicious domains and phishing websites.

Keeping these definitions current improves Network Protection’s effectiveness.

Follow these steps:

1. Open Windows Security.
2. Click Virus & threat protection.
3. Select Protection updates.
4. Click Check for updates.
5. Install the latest security intelligence updates.
6. Restart the computer if required.

Your system will now use the latest threat information.

Method 6: Verify the Policy Using Windows Security

After enabling the policy, verify that Microsoft Defender recognizes the configuration.

This helps confirm that Group Policy has been applied successfully.

Follow these steps:

1. Open Windows Security.
2. Select App & browser control.
3. Review the available protection settings.
4. Confirm that Microsoft Defender is managing the security configuration.
5. Close Windows Security.

If the settings appear as managed by your organization, the policy has likely been applied.

Method 7: Check for Conflicting Group Policies

Other Group Policy settings may override or disable Microsoft Defender features.

Reviewing security policies helps ensure there are no conflicts preventing Network Protection from working.

Follow these steps:

1. Open Local Group Policy Editor.
2. Navigate to Microsoft Defender Antivirus policies.
3. Review recently modified settings.
4. Ensure Microsoft Defender is not disabled.
5. Remove conflicting policies if appropriate.
6. Run gpupdate /force.
7. Restart the computer.

Network Protection should function normally after conflicting policies are resolved.

Method 8: Restart the Microsoft Defender Service

Restarting Microsoft Defender services reloads security policies and ensures the latest configuration is active.

This can help if the policy doesn’t appear to take effect immediately.

Follow these steps:

1. Press Windows + R.
2. Type services.msc and press Enter.
3. Locate Microsoft Defender-related services.
4. Verify that the required services are running.
5. Restart the computer if services cannot be restarted manually.
6. Check Windows Security again.

The updated policy should now be active.

Method 9: Verify Protection Using Event Viewer

Event Viewer records Microsoft Defender events related to security features, including Network Protection.

Reviewing these logs can help confirm that the feature is operating correctly.

Follow these steps:

1. Press Windows + X.
2. Select Event Viewer.
3. Expand Applications and Services Logs.
4. Navigate to Microsoft Defender logs.
5. Review recent events.
6. Look for Network Protection-related entries.
7. Confirm that the policy has been applied successfully.

These logs can also assist with troubleshooting if problems occur.

Conclusion

Enabling Network Protection through Group Policy is an effective way to strengthen the security of Windows 11 systems. By blocking connections to malicious websites, phishing pages, and known malware servers, Microsoft Defender helps reduce the risk of cyberattacks and data theft. The easiest method is to enable the policy through the Local Group Policy Editor and configure it to Block mode. After applying the policy, update Group Policy, verify that Microsoft Defender Antivirus is active, install the latest Windows and security intelligence updates, and confirm that no conflicting policies are disabling the feature. With Network Protection enabled, your computer gains an additional layer of defense against web-based threats while maintaining seamless protection in the background.

Frequently Asked Questions

1. What is Network Protection in Windows 11?

Network Protection is a Microsoft Defender feature that blocks connections to malicious websites, phishing pages, and known malware domains.

2. Which editions of Windows support enabling Network Protection through Group Policy?

The Local Group Policy Editor is available in Windows 11 Pro, Enterprise, and Education editions. Windows 11 Home does not include the Local Group Policy Editor by default.

3. Does Network Protection work with third-party antivirus software?

Network Protection works best when Microsoft Defender Antivirus is active. Some third-party antivirus programs may disable or replace Defender features.

4. Can I disable Network Protection later?

Yes. Return to the same Group Policy setting and change it to Not Configured or Disabled, then run gpupdate /force or restart the computer to apply the change.