Finding Many PC's with Virus & Threat Protection Turned Off

bshort1023 · 23 Sep 2019

Windows Active Directory Domain. I am finding many PC's that have the Virus & Threat Protection off. The users are not local admins so that do not have access to turn it off themselves. It requires an admin username/pw to turn it back on. It appears to stay on once I turn it back on.

I think it is related to Microsoft Updates going in but can't prove that.

We also have Malwarebytes installed on all PC's. I have no idea if that has anything to do with it. We have had both Malwarebytes and Windows Defender running together for years with no problem.

A) Trying to figure out why this is happening.

B) I can't figure out a way to remotely identify the PC's that are in this state other than walking to each PC.

Thanks for any help.

Bill Short/Newtown, PA

bro67 · 23 Sep 2019

Get Antivirus Product Status with PowerShell • The Lonely Administrator

That blog should be your go to.

Another one. https://gallery.technet.microsoft.co...s-for-7f8a9545

bro67 · 23 Sep 2019

Get Antivirus Product Status with PowerShell • The Lonely Administrator

That blog should be your go to.

Another one. https://gallery.technet.microsoft.co...s-for-7f8a9545
https://docs.microsoft.com/en-us/pre...115(v%3Dws.11)

I would also go through Malwarebytes Forums to see if an answer lies in there. If MBAM is performing Real Time Protection, Defender will disable its Real Time Protection.

bro67 · 23 Sep 2019

This PS Script will give you some info on rolling your own. https://gallery.technet.microsoft.co...us-of-4b748f25

dencal · 23 Sep 2019

Use MBAM free if you wish to use Defender, both are compatible....the paid version of MBAM switches OFF Defender.

Porthos · 23 Sep 2019

dencal said:

Use MBAM free if you wish to use Defender, both are compatible....the paid version of MBAM switches OFF Defender.

Set MB to never register in the action center to cure and avoid that issue.
Access Denied

dencal · 23 Sep 2019

The latest AV-Test results do not look favourable regarding paid version Malwarebytes Premium.....2 out of 6 for protection.
Whereas Defender is top with 6 out of 6....also MB Premium is not tested for business....WHY?
Personally I prefer to do an occasional MBAM Free scan as a secondary backup to Defender.