How to Turn On or Off Microsoft Defender Antivirus in Windows 10

DisableAntiSpyware is intended to be used by OEMs and IT Pros to disable Microsoft Defender Antivirus and deploy another antivirus product during deployment. This is a legacy setting that is no longer necessary as Microsoft Defender antivirus automatically turns itself off when it detects another antivirus program. This setting is not intended for consumer devices, and we’ve decided to remove this registry key. This change is included with Microsoft Defender Antimalware platform versions 4.18.2007.8 and higher KB 4052623. Enterprise E3 and E5 editions will be released at a future date. Note that this setting is protected by tamper protection. Tamper protection is available in all Home and Pro editions of Windows 10 version 1903 and higher and is enabled by default.

The impact of the DisableAntiSpyware removal is limited to Windows 10 versions prior to 1903 using Microsoft Defender Antivirus. This change does not impact third party antivirus connections to the Windows Security app. Those will still work as expected.

UPDATE 8/31/2020: Microsoft Defender Antivirus tamper protection is turned on by default for all consumer Windows 10 devices. This feature protects devices from cyber attacks that try to disable built-security solutions, such as antivirus protection, in an attempt to gain access to your data, to install malware, or to otherwise exploit your data, identity, and devices. As Microsoft Defender antivirus automatically turns itself off when it detects another antivirus program, we are removing a legacy registry setting called DisableAntiSpyware. Intended to be used by OEMs and IT admins to disable Microsoft Defender Antivirus for the purpose of deploying another antivirus product during deployment, DisableAntiSpyware is not applicable to consumer devices and will be removed beginning with Microsoft Defender Antimalware platform versions 4.18.2007.8 and higher (see KB4052623 for details). This update will be rolled out to devices running Windows Enterprise E3 and E5 at a future date.

Source: https://docs.microsoft.com/en-us/win...age-center#465

Starting with Windows 10 version 2004, Windows Defender Antivirus as been renamed to Microsoft Defender Antivirus.

Windows 10 includes Windows Security, which provides the latest antivirus protection. Your device will be actively protected from the moment you start Windows 10. Windows Security continually scans for malware (malicious software), viruses, and security threats. In addition to this real-time protection, updates are downloaded automatically to help keep your device safe and protect it from threats.

Microsoft Defender Antivirus is the next-generation protection component of Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). Next-generation protection brings together machine learning, big-data analysis, in-depth threat resistance research, and the Microsoft cloud infrastructure to protect devices in your enterprise organization. Next-generation protection services include the following:

• Behavior-based, heuristic, and real-time antivirus protection. This includes always-on scanning using file and process behavior monitoring and other heuristics (also known as "real-time protection"). It also includes detecting and blocking apps that are deemed unsafe, but may not be detected as malware.
• Cloud-delivered protection. This includes near-instant detection and blocking of new and emerging threats.
• Dedicated protection and product updates. This includes updates related to keeping Microsoft Defender Antivirus up to date.

Microsoft Defender Antivirus helps protect your PC against malware (malicious software) like viruses, spyware, and other potentially unwanted software. Malware can infect your PC without your knowledge: it might install itself from an email message, when you connect to the Internet, or when you install certain apps using a USB flash drive, CD, DVD, or other removable media. Some malware can also be programmed to run at unexpected times, not only when it's installed.

In Windows 10, you can turn off Microsoft Defender Antivirus real-time protection, but it will only be temporary. Windows will automatically turn real-time protection back on if it's off for a while.

See also:

• Microsoft Defender Antivirus in the Windows Security app | Microsoft Docs
• Microsoft Defender Antivirus | Microsoft Windows
• Next-generation protection in Windows 10, Windows Server 2016, and Windows Server 2019 | Microsoft Docs
• Mitigate threats by using Windows 10 security features | Microsoft Docs

This tutorial will show you how to completely turn on or off Microsoft Defender Antivirus for all users in Windows 10.

You must be signed in as an administrator to be able to turn on or off Microsoft Defender Antivirus.

When you install some 3rd party antivirus (AV) programs, they may automatically turn off Microsoft Defender Antivirus. In this case you may not be able to turn on Microsoft Defender Antivirus again until the 3rd party AV program has been disabled (turned off) or completely uninstalled.

If you have a 3rd party AV program installed and disable Microsoft Defender Antivirus, this will also disable periodic scanning.

If you have Windows 10 build 18305 or higher installed, you will need to turn off Tamper Protection to be able to disable Microsoft Defender Antivirus.

For a Windows 11 version of this tutorial, see:

Enable or Disable Microsoft Defender Antivirus in Windows 11

Contents

• Option One: To Turn On or Off Microsoft Defender Antivirus using Group Policy
• Option Two: To Turn On or Off Microsoft Defender Antivirus using a REG file

EXAMPLE: Microsoft Defender turned Off

The Windows Security screenshots below are from the Virus & threat protection > Manage settings link under Virus & threat protection settings.

OPTION ONE

To Turn On or Off Microsoft Defender Antivirus using Group Policy

The Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Two below.

1 If you are turning off Microsoft Defender Antivirus, then you will need to first turn off Microsoft Defender Antivirus Tamper Protection.

2 Open the Local Group Policy Editor.

3 In the left pane of Local Group Policy Editor, navigate to the location below depending on which version of Windows 10 you have installed. (see screenshot below)

(Windows 10 version 1909 and lower)
Computer Configuration\Administrative Templates\Windows Components\Windows Defender Antivirus

OR

(Windows 10 version 2004 and higher)
Computer Configuration\Administrative Templates\Windows Components\Microsoft Defender Antivirus

4 In the right pane of Windows Defender Antivirus or Microsoft Defender Antivirus in Local Group Policy Editor, double click/tap on the Turn off Windows Defender Antivirus or Turn off Microsoft Defender Antivirus policy to edit it. (see screenshot above)

5 Do step 5 (on) or step 6 (off) below for what you would like to do.

6 To Turn On Microsoft Defender Antivirus

A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

Not Configured is the default setting.

7 To Turn Off Microsoft Defender Antivirus

A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)

8 When finished, you can close the Local Group Policy Editor if you like.

9 If you are turning on Microsoft Defender Antivirus, open Windows Security, click/tap on Restart now under Virus & threat protection, and click/tap on Turn on under Virus & threat protection to turn on Windows Defender Antivirus Tamper Protection. (screenshots below)

10 If you like, you may also want to hide or show the Windows Security notification icon.

OPTION TWO

To Turn On or Off Microsoft Defender Antivirus using a REG file

The downloadable .reg files below will add and modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

DisableAntiSpyware DWORD

(delete) or 0 = On
1 = Off

1 If you are turning off Microsoft Defender Antivirus, then you will need to first turn off Microsoft Defender Antivirus Tamper Protection.

2 Do step 3 (on) or step 4 (off) below for what you would like to do.

3 To Turn On Microsoft Defender Antivirus

This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 5 below.

Turn_On_Windows_Defender_Antivirus.reg

Download

4 To Turn Off Microsoft Defender Antivirus

A) Click/tap on the Download button below to download the file below, and go to step 5 below.

Turn_Off_Windows_Defender_Antivirus.reg

Download

5 Save the .reg file to your desktop.

6 Double click/tap on the downloaded .reg file to merge it.

7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

8 If you are turning on Microsoft Defender Antivirus, open Windows Security, and click/tap on Turn on under Virus & threat protection to turn on Microsoft Defender Antivirus Tamper Protection. (see screenshot below)

9 If you like, you may also want to hide or show the Windows Security notification icon.

10 If you like, you can now delete the downloaded .reg file.

That's it,
Shawn

Related Tutorials

---

• How to Enable or Disable Real-time Protection for Microsoft Defender Antivirus in Windows 10
• How to Turn On or Off Windows 10 Limited Periodic Scanning with Windows Defender
• How to Enable or Disable Windows Defender Block at First Sight in Windows 10
• How to Add or Remove Exclusions for Windows Defender in Windows 10
• How to Create a Windows Defender Settings shortcut in Windows 10
• How to Add or Remove Microsoft Defender context menu in Windows 10
• How to Hide or Show Windows Defender Notification Area Icon in Windows 10
• How to Add or Remove 'Scan with Microsoft Defender' Context Menu in Windows 10
• How to Turn On or Off Windows Defender Enhanced Notifications in Windows 10
• How to Enable or Disable Credential Guard in Windows 10
• How to Enable or Disable Device Guard in Windows 10
• How to Enable or Disable Scan Archive Files by Windows Defender in Windows 10
• Enable or Disable Scan Mapped Network Drives with Windows Defender in Windows 10
• Enable or Disable Scan Removable Drives during Windows Defender Full Scan in Windows 10
• How to Manually Scan Files, Folders, and Drives with Windows Defender in Windows 10
• How to Schedule a Scan in Microsoft Defender Antivirus in Windows 10
• How to Specify Scheduled Scan Type for Microsoft Defender Antivirus in Windows 10
• How to Enable or Disable Windows Defender Exploit Guard Controlled Folder Access in Windows 10
• How to Add Windows Security to Control Panel in Windows 10
• Hide or Show Virus and Threat Protection in Windows Defender Security Center in Windows 10
• How to Turn On or Off Windows Defender Block Suspicious Behaviors in Windows 10
• How to Update Security Intelligence Definition Version for Windows Defender Antivirus in Windows 10
• How to Find Windows Defender Antivirus Version in Windows 10
• How to Change Windows Defender Antivirus Maximum CPU Usage for a Scan in Windows 10
• How to Enable or Disable Scan Network Files with Windows Defender Antivirus in Windows 10
• How to Enable or Disable Microsoft Defender Antivirus Potential Unwanted App (PUA) Protection in Windows 10
• Enable or Disable Microsoft Defender Antivirus Updates Over Metered Connections in Windows 10

Windows 11 Tutorials