Turn behavior monitoring on or off

If you use role-based administration:

You must have the Policy setting - anti-virus and HIPS right to perform this task.
You cannot edit a policy if it is applied outside your active sub-estate.

By default, behavior monitoring is enabled.

To turn behavior monitoring on or off:

Check which anti-virus and HIPS policy is used by the group or groups of computers you want to configure.
See Check which policies a group uses.
In the Policies pane, double-click Anti-virus and HIPS.
Double-click the policy you want to change.
The Anti-Virus and HIPS policy dialog box is displayed.
In the On-access scanning panel, select or clear the Enable behavior monitoring check box.