1）Software Protection 與 Windows Defender是兩個獨立的服務。在Windows 服務中他們的描述分别為
| Software Protection | Enables the download, installation and enforcement of digital licenses for Windows and Windows applications. If the service is disabled, the operating system and licensed applications may run in a notification mode. It is strongly recommended that you not disable the Software Protection service. |  |
| Windows Defender Antivirus Service | Helps protect users from malware and other potentially unwanted software |  |
2）如何配置及修改Microsoft Defender Antivirus：https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus#enable-and-configure-always-on-protection-in-group-policy
| | |
3）實時保護部分的設定可以參考：https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus#disable-real-time-protection-in-group-policy， 預設情況下，Real-time protection中的設定沒有開啟。
4）Scan設定，如設定在Scan期間最大占用CPU比例（預設為20%），定時掃描的時間(預設為Never)。
也可以通過Schedule Job來設定Scan的時間，同時也可以在Schedule Job中檢視觸發的條件：https://support.microsoft.com/zh-cn/help/4026132/windows-10-schedule-scan-microsoft-defender-antivirus
設定排除一些掃描目錄：https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/configure-extension-file-exclusions-microsoft-defender-antivirus#use-group-policy-to-configure-folder-or-file-extension-exclusions
5）如需要考慮停止Windows Defender 服務，可以參考文檔：https://answers.microsoft.com/en-us/protect/forum/all/how-to-turn-off-windows-defender-windows-10/b78f0b35-8997-4a80-831a-601385b961db
當在複雜的環境中面臨問題，格物之道需：濁而靜之徐清，安以動之徐生。 雲中，恰是如此!