Hi,
Early Launch Antimalware Protection is enabled by default.
would it be necessary to switch it on from Group Policy, too?