[FEATURE] Silence Windows Defender sample submission prompt

[HarryVasanth]

Description

Issue:

• [FEATURE]: Disable Windows Defender sample submission nag #200
  Users who prefer to keep Windows Defender enabled for security are subjected to a constant nag notification asking to submit files to Microsoft. Defender ignores standard Windows notification settings for this prompt, leaving users with no native UI option to silence it without turning off Defender completely.

Fix:

Added a registry tweak to configure the SubmitSamplesConsent Spynet policy. By setting this registry value to 2 ("Never send"), it effectively suppresses the sample submission prompt while allowing Windows Defender's core security features to remain active.

Changes Made

• Modified playbook/src/Configuration/Tasks/registry/security/security.yml to include the SubmitSamplesConsent registry value under the Defender reporting section.

Impact & Testing

• User Experience: Removes a persistent and annoying notification, improving the quality of life for users who choose to keep Defender enabled.
• Security & Privacy: Keeps Defender's real-time protection intact while safely preventing unwanted file sample uploads and telemetry.

Resolves: #200

[melo936]

Why?

[HarryVasanth]

I added it to roll back the policy change if the user chooses to revert the playbook default state.

If the "Why?" is referring to why I deleted the whole key(!registryKey) instead of just the specific value, I did this to follow the pattern of other policy reverts in the file (like the Signature Updates key right above it).

However, if you'd prefer a more targeted and safer approach that only removes the specific value we added (so we don't accidentally wipe out other Spynet policies the user might have set), we can easily change it to:

  # Revert Windows Defender Antivirus - Spynet/Sample Submission policy
  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Spynet', value: 'SubmitSamplesConsent', operation: delete}

Let me know if you'd like me to push this change or if you had a different idea in mind!
Please feel free to push any changes as you see fit 😊

[melo936]

revert.yml is basically a list of bad tweaks that get removed when coming from an old ReviOS version.

Just remove the lines.

[HarryVasanth]

Ah, I get it now! Sorry I misunderstood and thought it was for rolling back the current playbook's changes if a user decided to uninstall.