msconfig-- service running but disabled?

My first new thread and pictures speak louder than words:

Windows Defender is shown both running AND disabled. I have no third-party security or firewall.
I am unable to select this service here (msconfig)-(but rightly set as 'Automatic' in services.msc) nor am I able to set Normal Startup: on applying, all changes are cancelled.
I must have removed some needed startup program or app...?

HOWEVER, Windows Defender DOES start on boot and all is swell. No log errors except for Cortana, which is broke and shows a registry error, but that is another question, I think. In case it is not, here's the log:

Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: Invalid value for registry See the Microsoft-Windows-TWinUI/Operational log for additional information.

This is like a shake down cruise on a boat... some little problems but otherwise, not a bad OS. My install is the free upgrade from Windows 7, build 10240.
Thanks in advance for your time.

I use services.msc and taskmanager autoruns. Not a problem.
Like I say, I'm simply ironing out inconsistancies. Probably too much time on my hands.
Why disabled? Why 2012? Where is that information stored? A registry value?
Someday I will do clean .iso install --if for no other reason than to get Cortana back.
But for now, just curious. Thanks.

Defender can't be shut off gracefully until you install an Antivirus program. This tutorial tells you how to shut it off completely.

I don't see the problem because if you have a antivirus program installed it don't run.

Mine shows not running, manual.

You can turn off Windows Defender completely in group policy. 1. Start - Run - GPEDIT.MSC 2.Computer Config 3. Admin Templates 4. Windows Components 5. Windows Defender 6. Turn off Windows Defender - Enabled