Help undoing these commands entered at command prompt

Page 1 of 2 12 LastLast

  1. Posts : 2
    Windows 10
       #1

    Help undoing these commands entered at command prompt


    Hello everyone.

    I was talking with PC Matic tech support who were trying to troubleshoot a problem I was having. They had me run some commands that totally crippled Windows Defender. It did not fix the problem and now they are not being helpful in assisting me to undo these things they had me do to my system.

    These are the commands they had me enter:

    REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f

    REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableBehaviorMonitoring /t REG_DWORD /d 1 /f

    REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableOnAccessProtection /t REG_DWORD /d 1 /f

    REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableScanOnRealtimeEnable /t REG_DWORD /d 1 /f

    REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" /v enableSmartScreen /t REG_DWORD /d 0 /f

    REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v EnabledV9 /t REG_DWORD /d 0 /f

    REG ADD "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\AppHost" /v EnableWebContentEvaluation /t REG_DWORD /d 0 /f

    REG ADD "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\AppHost" /v PreventOverride /t REG_DWORD /d 0 /f

    Now, I don't know much about these commands but just from looking at them I have to wonder if I could reverse these changes by entering the same commands again but replacing the '0's with '1's and the '1's with '0's. I don't want to mess things up further so I am seeking your assistance here.
      My Computer


  2. Posts : 27,232
    Windows 10 (Pro and Insider Pro)
       #2

    Most of the Windows defender settings are easy configurable by commands in powershell
    Start powershell by clicking on Start and type powershell, click on it to run
    type
    Get-MpPreference
    You'll get a list like the one below. You can change any of it by typing (example for PUAprotection:

    Set-MpPreference -PUAProtection enabled
    Check my list and set it to fix your changes (names in reg entries are the same)
    Another option is to download app named ConfigureDefender which has Defaults to restore

    Help undoing these commands entered at command prompt-image.png
      My Computers


  3. Posts : 2
    Windows 10
    Thread Starter
       #3

    Thank you AndreTen that was very useful.
      My Computer


  4. Posts : 4,554
    Windows 11 Pro 64-bit
       #4

    Open the Command Prompt as a administrator and execute GPRESULT /H %UserProfile%\Desktop\GPReport.html command and attached the GPReport.html file located at Desktop to your next post.
      My Computer


  5. Posts : 27,232
    Windows 10 (Pro and Insider Pro)
       #5

    ysXeon said:
    Thank you AndreTen that was very useful.
    You're welcome. Did you use Powershell or app?
      My Computers


  6. Posts : 11,660
    Windows 10 Home x64 Version 21H2 Build 19044.1776
       #6

    FreeBooter said:
    Open the Command Prompt as a administrator and execute GPRESULT /H %UserProfile%\Desktop\GPReport.html command and attached the GPReport.html file located at Desktop to your next post.
    Freebooter,

    The Windows 10 version of GPResult does not have a /H switch or anything similar.

    Denis
      My Computer


  7. Posts : 13,960
    Windows 10 Pro X64 21H1 19043.1503
       #7

    Try3 said:
    Freebooter,

    The Windows 10 version of GPResult does not have a /H switch or anything similar.

    Denis
    >GPResult /?

    GPRESULT [/S system [/U username [/P [password]]]] [/SCOPE scope]
    [/USER targetusername] [/R | /V | /Z] [(/X | /H) <filename> [/F]]

    Description:
    This command line tool displays the Resultant Set of Policy (RSoP)
    information for a target user and computer.

    Parameter List:
    /S system Specifies the remote system to connect to.

    /U [domain\]user Specifies the user context under which the
    command should run.
    Can not be used with /X, /H.

    /P [password] Specifies the password for the given user
    context. Prompts for input if omitted.
    Cannot be used with /X, /H.

    /SCOPE scope Specifies whether the user or the
    computer settings need to be displayed.
    Valid values: "USER", "COMPUTER".

    /USER [domain\]user Specifies the user name for which the
    RSoP data is to be displayed.

    /X <filename> Saves the report in XML format at the
    location and with the file name specified
    by the <filename> parameter. (valid in Windows
    Vista SP1 and later and Windows Server 2008 and later)

    /H <filename> Saves the report in HTML format at the
    location and with the file name specified by
    the <filename> parameter. (valid in Windows
    at least Vista SP1 and at least Windows Server 2008)
      My Computers


  8. Posts : 25,093
    10 Home x64 (21H2) (10 Pro on 2nd pc)
       #8

    Interesting, you are all correct.

    Windows 10 Home does not have as many options as there are in Pro. In particular /H is only available in Pro.

    Help undoing these commands entered at command prompt-gpresult-home.png

    Help undoing these commands entered at command prompt-gpresult-pro.png
      My Computers


  9. Posts : 13,960
    Windows 10 Pro X64 21H1 19043.1503
       #9

    Ah, I have Pro.
      My Computers


  10. Posts : 13,960
    Windows 10 Pro X64 21H1 19043.1503
       #10

    Tried to run GPRESULT /H %UserProfile%\Desktop\GPReport.html and got a file not found. Seems my Desktop got moved to OneDrive. Moved it back where it belongs and the command runs and completes as it should. Download folder got moved as well so moved that back where it belongs too.
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 01:36.
Find Us




Windows 10 Forums