Windows 10: Turn On or Off Windows Defender Real-time Protection in Windows 10  

Page 1 of 9 123 ... LastLast
    Turn On or Off Windows Defender Real-time Protection in Windows 10

    Turn On or Off Windows Defender Real-time Protection in Windows 10

    How to Turn On or Off Windows Defender Real-time Protection in Windows 10
    Published by Category: Security System
    03 Jul 2018
    Designer Media Ltd

    Published by


    Brink's Avatar
    Administrator

    Posts: 30,741

    Show Printable Version 


    How to Turn On or Off Windows Defender Real-time Protection in Windows 10


    Windows Defender helps protect your PC against malware (malicious software) like viruses, spyware, and other potentially unwanted software. Malware can infect your PC without your knowledge: it might install itself from an email message, when you connect to the Internet, or when you install certain apps using a USB flash drive, CD, DVD, or other removable media. Some malware can also be programmed to run at unexpected times, not only when it's installed.

    Windows Defender is included with Windows and helps keep malware from infecting your PC in two ways:
    • Providing real-time protection. Windows Defender notifies you when malware tries to install itself or run on your PC. It also notifies you when apps try to change important settings.
    • Providing anytime scanning options. Windows Defender automatically scans your PC for installed malware on a regular basis, but you can also start a scan whenever you want. Windows Defender automatically removes (or temporarily quarantines) anything that's detected during a scan.

    When you use Windows Defender, it's important to have up-to-date definitions. Definitions are files that act like an ever-growing encyclopedia of potential software threats. Windows Defender uses definitions to detect any malware and to notify you of potential risks. To help keep your definitions up to date, you can set Windows Update to work with Windows Defender and automatically install new definitions as they're released. Windows Defender also checks online for updated definitions before scanning.

    When you install some 3rd party antivirus (AV) programs, they may automatically turn off Windows Defender. In this case you will not be able to turn on Windows Defender again until the 3rd party AV program has been completely uninstalled.

    This tutorial will show you how to turn on or off Windows Defender Real-time protection for all users in Windows 10.

    You must be signed in as an administrator to be able to turn on or off Windows Defender Real-time protection.


     CONTENTS:

    • Option One: To Turn Off Windows Defender Real-time Protection in Windows Defender Security Center
    • Option Two: To Turn On Windows Defender Real-time Protection in Windows Defender Security Center
    • Option Three: To Turn On Windows Defender Real-time Protection in Windows Defender Antivirus
    • Option Four: To Turn On or Off Windows Defender Real-time Protection in PowerShell
    • Option Five: To Turn On or Off Windows Defender Real-time Protection in Command Prompt
    • Option Six: To Enable or Disable Windows Defender Real-time Protection in Group Policy
    • Option Seven: To Enable or Disable Windows Defender Real-time Protection using a REG file


    EXAMPLE: Windows Defender Real-Time Protection disabled
    Name:  Windows_Defender_Real-time_protection-off.png
Views: 93342
Size:  32.2 KB





    Turn On or Off Windows Defender Real-time Protection in Windows 10 OPTION ONE Turn On or Off Windows Defender Real-time Protection in Windows 10
    To Turn Off Windows Defender Real-time Protection in Windows Defender Security Center


    You can use this option to turn off Windows Defender real-time protection temporarily. When it's off for a while, Windows will turn it back on automatically.

    Option Six and Option Seven below will override this option.

    1. Open the Windows Defender Security Center, and click/tap on the Virus & threat protection icon. (see screenshot below)

    Name:  Turn_off_Windows_Defender_Real-time_protection-1.jpg
Views: 93015
Size:  42.0 KB

    2. Click/tap on the Virus & threat protection settings link. (see screenshot below)

    Name:  Turn_off_Windows_Defender_Real-time_protection-2.png
Views: 93018
Size:  33.0 KB

    3. Turn off Real-time Protection. (see screenshot below)

    Name:  Turn_off_Windows_Defender_Real-time_protection-3.png
Views: 93009
Size:  34.6 KB

    4. Click/tap on Yes when prompted by UAC.

    5. You can now close the Windows Defender Security Center if you like.






    Turn On or Off Windows Defender Real-time Protection in Windows 10 OPTION TWO Turn On or Off Windows Defender Real-time Protection in Windows 10
    To Turn On Windows Defender Real-time Protection in Windows Defender Security Center


    This is the default setting.

    Option Six and Option Seven below will override this option.

    1. Open the Windows Defender Security Center.

    2. Do step 3 or step 4 below for how you would like to turn on Windows Defender Real-time protection.

    3. Click/tap on the Turn on button under the Virus & threat protection icon, and go to step 5 below. (see screenshot below)

    Name:  Turn_on_Windows_Defender_Real-time_protection-1.jpg
Views: 92873
Size:  47.5 KB

    4. Click/tap on the Virus & threat protection icon. (see screenshot below)

    Name:  Turn_on_Windows_Defender_Real-time_protection-2.jpg
Views: 94065
Size:  47.7 KB

    A) Click/tap on the Virus & threat protection settings link. (see screenshot below)

    Name:  Turn_on_Windows_Defender_Real-time_protection-3.png
Views: 92739
Size:  35.3 KB

    B) Turn on Real-time Protection, and go to step 5 below. (see screenshot below)

    Name:  Turn_on_Windows_Defender_Real-time_protection-4.png
Views: 93231
Size:  37.3 KB

    5. Click/tap on Yes when prompted by UAC.

    6. You can now close the Windows Defender Security Center if you like.






    Turn On or Off Windows Defender Real-time Protection in Windows 10 OPTION THREE Turn On or Off Windows Defender Real-time Protection in Windows 10
    To Turn On Windows Defender Real-time Protection in Windows Defender Antivirus


    This is the default setting.

    Option Six and Option Seven below will override this option.

    Starting with Windows 10 build 17063, trying to open Windows Defender Antivirus will now only open Windows Defender Security Center.

    1. Open Windows Defender Antivirus (%ProgramFiles%\Windows Defender\MSASCui.exe).

    2. Click/tap on the Turn on button. (see screenshot below)

    Name:  Turn_on_Windows_Defender_AV_Real-time_protection.jpg
Views: 92822
Size:  55.9 KB

    3. You can now close Windows Defender Antivirus if you like. (see screenshot below)

    Name:  Turn_on_Windows_Defender_AV_Real-time_protection-2.jpg
Views: 92795
Size:  48.4 KB






    Turn On or Off Windows Defender Real-time Protection in Windows 10 OPTION FOUR Turn On or Off Windows Defender Real-time Protection in Windows 10
    To Turn On or Off Windows Defender Real-time Protection in PowerShell


    If you use this option to turn off Windows Defender Real-time protection, it will only be temporary. When it's off for a while, Windows will turn it back on automatically.

    Option Six and Option Seven below will override this option.

    1. Open an elevated PowerShell.

    2. Enter the command below you want to use into PowerShell, and press Enter. (see screenshots below)

    (Turn on)
    Set-MpPreference -DisableRealtimeMonitoring 0
    or
    Set-MpPreference -DisableRealtimeMonitoring $false

    OR

    (Turn off)
    Set-MpPreference -DisableRealtimeMonitoring 1
    or
    Set-MpPreference -DisableRealtimeMonitoring $true

    3. When finished, you can close PowerShell if you like.

    Click image for larger version. 

Name:	Turn_on_Windows_Defender_Real-time_Protection_PowerShell.png 
Views:	1589 
Size:	37.8 KB 
ID:	110736
    Click image for larger version. 

Name:	Turn_off_Windows_Defender_Real-time_Protection_PowerShell.png 
Views:	995 
Size:	37.1 KB 
ID:	110735






    Turn On or Off Windows Defender Real-time Protection in Windows 10 OPTION FIVE Turn On or Off Windows Defender Real-time Protection in Windows 10
    To Turn On or Off Windows Defender Real-time Protection in Command Prompt


    If you use this option to turn off Windows Defender Real-time protection, it will only be temporary. When it's off for a while, Windows will turn it back on automatically.

    Option Six and Option Seven below will override this option.

    1. Open an elevated command prompt.

    2. Enter the command below you want to use into the elevated command prompt, and press Enter.

    (Turn on)
    PowerShell Set-MpPreference -DisableRealtimeMonitoring 0
    or
    PowerShell Set-MpPreference -DisableRealtimeMonitoring $false

    OR

    (Turn off)
    PowerShell Set-MpPreference -DisableRealtimeMonitoring 1
    or
    PowerShell Set-MpPreference -DisableRealtimeMonitoring $true

    3. When finished, you can close the elevated command prompt if you like.






    Turn On or Off Windows Defender Real-time Protection in Windows 10 OPTION SIX Turn On or Off Windows Defender Real-time Protection in Windows 10
    To Enable or Disable Windows Defender Real-time Protection in Group Policy


    Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Seven below.

    This option is the same as Option Seven below, and will let you disable Windows Defender Real-time Protection without being prompted it is turned off, and without it getting automatically turned back on later by Windows.

    When disabled, you will not be able to do Option One, Option Two, Option Three, Option Four, or Option Five.

    1. Open the Local Group Policy Editor.

    2. In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)

    Computer Configuration/Administrative Templates/Windows Components/Windows Defender Antivirus/Real-time Protection

    Name:  Windows_Defender_gpedit-1.jpg
Views: 69453
Size:  79.7 KB

    3. In the right pane of Real-time Protection in Local Group Policy Editor, double click/tap on the Turn off real-time protection policy to edit it. (see screenshot above)

    4. Do step 5 (enable) or step 6 (disable) below for what you would like to do.


     5. To Enable Windows Defender Real-time Protection

    A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

    Not Configured[/B] is the default setting.


     6. To Disable Windows Defender Real-time Protection

    A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)

    Name:  Windows_Defender_group_policy-2.png
Views: 166680
Size:  34.4 KB

    7. When finished, you can close the Local Group Policy Editor if you like.






    Turn On or Off Windows Defender Real-time Protection in Windows 10 OPTION SEVEN Turn On or Off Windows Defender Real-time Protection in Windows 10
    To Enable or Disable Windows Defender Real-time Protection using a REG file


    This option is the same as Option Six above and will let you disable Windows Defender Real-time Protection without being prompted it is turned off, and without it getting automatically turned back on later by Windows.

    When disabled, you will not be able to do Option One, Option Two, Option Three, Option Four, or Option Five.

    The downloadable .reg files below will add and modify the DWORD value in the registry key below.

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection

    DisableRealtimeMonitoring DWORD

    (delete) = enable
    1 = disable

    1. Do step 2 (enable) or step 3 (disable) below for what you would like to do.


     2. To Enable Windows Defender Real-time Protection

    This is the default setting.

    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Enable_Windows_Defender_Real-Time_Protection.reg

    download


     3. To Disable Windows Defender Real-time Protection

    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Disable_Windows_Defender_Real-Time_Protection.reg

    download

    4. Save the .reg file to your desktop.

    5. Double click/tap on the downloaded .reg file to merge it.

    6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

    7. Restart the computer to apply.

    8. If you like, you can now delete the downloaded .reg file.


    That's it,
    Shawn


    Related Tutorials




  1. Posts : 30,741
    64-bit Windows 10 Pro build 17713
       29 Apr 2015 #1

    Tutorial updated for Windows 10 Technical Preview build 10074.

    Note   Note
    In Windows 10 Technical Preview build 10074, you can turn off Windows Defender real-time protection temporarily, but it's off for a while, Windows will turn it back on automatically.

      My ComputersSystem Spec

  2.    06 Jul 2015 #2

    Brink said: View Post
    Tutorial updated for Windows 10 Technical Preview build 10074.

    Note   Note
    In Windows 10 Technical Preview build 10074, you can turn off Windows Defender real-time protection temporarily, but it's off for a while, Windows will turn it back on automatically.

    You can disable Windows Defender Real-time Protection in Local Group Policy Editor (Run: gpedit.msc then select: Computer Configuration/Administrative Templates/Windows Components/Windows Defender/Real-time Protection and enable the "Turn off Real-time Protection" setting). It won't turn back on automatically and Windows Defender doestn't even notice that there's something wrong (it will stay green).
      My ComputerSystem Spec


  3. Posts : 91
    64-bit 10240 10 Pro
       06 Jul 2015 #3

    I use it, WD seems to be adequate.
      My ComputerSystem Spec


  4. Posts : 30,741
    64-bit Windows 10 Pro build 17713
    Thread Starter
       06 Jul 2015 #4

    Majestic12 said: View Post
    You can disable Windows Defender Real-time Protection in Local Group Policy Editor (Run: gpedit.msc then select: Computer Configuration/Administrative Templates/Windows Components/Windows Defender/Real-time Protection and enable the "Turn off Real-time Protection" setting). It won't turn back on automatically and Windows Defender doestn't even notice that there's something wrong (it will stay green).

    You could also use this below to completely disable Windows Defender. :)

    https://www.tenforums.com/tutorials/5...dows-10-a.html
      My ComputersSystem Spec

  5.    06 Jul 2015 #5

    Brink said: View Post
    You could also use this below to completely disable Windows Defender. :)

    https://www.tenforums.com/tutorials/5...dows-10-a.html
    I know, but quick antivirus scan can be useful from time to time and furthermore after completely disabling Windows Defender you get that annoying window, informing you that WD is turned off, every time the computer starts.
      My ComputerSystem Spec


  6. Posts : 30,741
    64-bit Windows 10 Pro build 17713
    Thread Starter
       06 Jul 2015 #6

    Agreed. Tutorial updated to add this. :)
    Last edited by Brink; 06 Jul 2015 at 13:33. Reason: update
      My ComputersSystem Spec

  7.    10 Nov 2015 #7

    Using the merge registry to enable WD on the above method, have noticed that while running Emsisoft Emergency Kit (EEK) that the registry created by the utility (Enable_Windows_Defender_Real-Time_Protection.reg) is when EEK is run listed as a (from the log file):

    Scan start: 11/8/2015 10:44:19 PMValue: HKEY_USERS\S-1-5-21-2610782532-1500699501-3633152452-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN -> WINDOWS DEFENDER detected: Backdoor.Win32.BlackShades (A)

    realizing this may be a false/positive curious as to why it would see the registry file as such.
      My ComputerSystem Spec


  8. Posts : 3,267
    10.5 Home 1803 x64
       10 Nov 2015 #8

    tazmo8448 said: View Post
    realizing this may be a false/positive curious as to why it would see the registry file as such.
    Malware usually disables WD , so it sees the key as a threat, does not matter, if it is 1 or 0.
      My ComputerSystem Spec

  9.    10 Nov 2015 #9

    On an upgrade to W10 from W7 the WD icon didn't show so I used the above utility to enable it. Then a little later ran EEK it latched on the registry file the utility created showing it as a BackDoor.BlackShades. Let me make this clear the BackDoor did not show in EEK til I ran the utility. It did not show prior to running the utility. The utility itself creates the registry file that EEK finds as a Trojan. I can remove the reg file and EEK shows nothing I can re-run the utility and EEK will again show it as a Trojan.
    I am aware of the fact that malware likes to disable A/V but this particular issue is caused by triggering the icon to show in the task bar.
      My ComputerSystem Spec


 
Page 1 of 9 123 ... LastLast

Tutorial Categories

Turn On or Off Windows Defender Real-time Protection in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Xbox Windows Phone


Related Threads
How to Turn On or Off Windows Defender Antivirus in Windows 10 Windows Defender Antivirus helps protect your PC against malware (malicious software) like viruses, spyware, and other potentially unwanted software. Malware can infect your PC...
Performance & Maintenance Turn On or Off System Protection for Drives in Windows 10 in Tutorials
System protection is a feature that allows you to undo unwanted system changes by being able to do a System Restore. System Restore enables users, in the event of a problem, to restore their computers to a previous state (restore point) without...
Hi, how can I disable Windows Defender Real-time protection but keep the Windows Defender app available and working? I've seen ways to disable Windows Defender Real-time protection in W10, however this involved disabling Windows Defender as a...
Defender: Disabled Real time; keep scheduled and on demand in AntiVirus, Firewalls and System Security
I just upgraded to Win 10 (RTM build). I have disabled the AV (Defender, why did they go back to the old name?) real time protection because I do not run it, never did and have never gotten a virus (and I've had a computer for 30 years). I was...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 10:56.
Find Us