# Retrieve the full configuration details of a Defender payload item

Get Windows Defender policy payload details

## Endpoint

**GET** `/api/v1/mdm/profiles/{profile_id}/payloads/windowsdefenderpolicy/payloaditems/{payload_id}`

## Request

### Request URL

`https://{server-hostname}:8383/api/v1/mdm/profiles/{profile_id}/payloads/windowsdefenderpolicy/payloaditems/{payload_id}`

### Scope

`MDMDeviceMgmt.READ`

### Header

`Authorization: d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Request Headers

- **Accept** `string` — **Mandatory**
  - `application/json`

#### Path Parameters

- **profile_id** `string` — **Mandatory`
  - Unique identifier of the profile. Obtain from the [Create Profile](https://www.manageengine.com/products/desktop-central/help/api/onpremise/mdm-profiles-create-profile.html) or [Get Profiles](https://www.manageengine.com/products/desktop-central/help/api/onpremise/mdm-profiles-get-profile.html) response.
- **payload_id** `string` — **Mandatory**
  - Unique identifier of the payload item. Obtain from the [Get Payload Item IDs](https://www.manageengine.com/products/desktop-central/help/api/onpremise/windows-get-defender-payload.html) response.

### Sample Request

```curl
curl --request GET \
  --url https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/windowsdefenderpolicy/payloaditems/{payload_id} \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'
```

## Response

### Response Parameters

#### HTTP Code 200

Response body: `application/json`

- `payload_id` `long`
  - Unique identifier of the payload item
- `allow_archive_scanning` `boolean`
  - Allow Archive Scanning. Default: true
- `allow_behavior_monitoring` `boolean`
  - Allow Behavior Monitoring. Default: true
- `allow_cloud_protection` `boolean`
  - Allow Cloud Protection. Default: true
- `allow_email_scanning` `boolean`
  - Allow Email Scanning. Default: false
- `allow_full_scan_on_mapped_networkdrives` `boolean`
  - Allow Full Scan On Mapped Networkdrives. Default: false
- `allow_full_scan_removable_drive_scanning` `boolean`
  - Allow Full Scan Removable Drive Scanning. Default: true
- `allow_intrusion_prevention_system` `boolean`
  - Allow Intrusion Prevention System. Default: true
- `allow_ioav_protection` `boolean`
  - Allow Ioav Protection. Default: true
- `cloud_block_level` `integer`
  - Cloud Block Level. Default: 0
- `allow_onaccess_protection` `boolean`
  - Allow Onaccess Protection. Default: true
- `allow_realtime_monitoring` `boolean`
  - Allow Realtime Monitoring. Default: true
- `allow_scanning_network_files` `boolean`
  - Allow Scanning Network Files. Default: false
- `allow_script_scanning` `boolean`
  - Allow Script Scanning. Default: true
- `allow_user_ui_access` `boolean`
  - Allow User Ui Access. Default: true
- `check_for_signatures_before_runningscan` `boolean`
  - Check For Signatures Before Runningscan. Default: false
- `pua_protection` `integer`
  - Pua Protection. Default: 0
- `realtime_scan_direction` `integer`
  - Realtime Scan Direction. Default: 0
- `scan_parameter` `integer`
  - Scan Parameter. Default: 1
- `allow_switch_to_async_inspection` `boolean`
  - Allow Switch To Async Inspection. Default: false
- `disable_cpu_throttle_on_idle_scans` `boolean`
  - Disable Cpu Throttle On Idle Scans. Default: true
- `disable_network_protection_perf_telemetry` `boolean`
  - Disable Network Protection Perf Telemetry. Default: false
- `enable_filehash_computation` `boolean`
  - Enable Filehash Computation. Default: false
- `hide_exclusions_from_local_admins` `boolean`
  - Hide Exclusions From Local Admins. Default: false
- `hide_exclusions_from_local_users` `boolean`
  - Hide Exclusions From Local Users. Default: false

### Sample Response: HTTP 200

Full configuration details of Defender payload item

```json
{
  "allow_behavior_monitoring": true,
  "disable_cpu_throttle_on_idle_scans": true,
  "allow_switch_to_async_inspection": false,
  "hide_exclusions_from_local_admins": false,
  "allow_scanning_network_files": false,
  "scan_parameter": "2",
  "allow_realtime_monitoring": true,
  "disable_network_protection_perf_telemetry": false,
  "allow_email_scanning": false,
  "hide_exclusions_from_local_users": false,
  "allow_onaccess_protection": true,
  "allow_archive_scanning": true,
  "allow_ioav_protection": true,
  "allow_full_scan_on_mapped_networkdrives": false,
  "allow_cloud_protection": true,
  "pua_protection": "1",
  "allow_script_scanning": true,
  "cloud_block_level": "2",
  "check_for_signatures_before_runningscan": false,
  "payload_id": "9007199254741295",
  "allow_full_scan_removable_drive_scanning": true,
  "allow_user_ui_access": true,
  "enable_filehash_computation": false,
  "allow_intrusion_prevention_system": true,
  "realtime_scan_direction": "1"
}
```

### Possible Response Codes

- **200** `HTTP code`

## API Rate Limit

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 120 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.