How to turn off Windows Defender permanently

29

12

Windows Defender keeps blocking a third-party program that I know isn't a threat. All my attempts to disable Windows Defender have failed.

I've tried to:

  • Go in the Windows Defender option and disable it from there.
  • Edit the group policies, find the Windows Defender file and edit the "turn off Windows Defender" to be always disabled.
  • Prevent the Windows Defender service from even starting but the option appear to be greyed out.

How do I turn it off permanently?

WizLiz

Posted 2015-08-04T19:55:19.377

Reputation: 409

1Would you be fine with installing another antivirus software which will automatically disable Windows Defender as no longer required? – miroxlav – 2015-08-04T20:42:22.807

You need to list all your attempts specifically or we will all be guessing. – Moab – 2015-08-04T23:58:06.460

@miroxlav I'd rather avoid another antivirus software (I'm already using malewarebytes) and in general avoid any third party software that disable Windows Defender. I assume its possible to do it within Windows itself. – WizLiz – 2015-08-05T06:43:07.810

I also don't like the 3rd party idea. It was just a question. The best way would be to enhance your question. Maybe it is NOT needed to turn defender off (it is useful) but describe here what exactly you meant by "it is blocking an application". Then possibly a way for adding exception to Defender can be worked out. Help us to help you by working on better question! :) – miroxlav – 2015-08-05T08:08:29.843

@miroxlav That's why for now I'm using a workarround, which is put the directory from which the application is run in the exception of Windows Defender. However if for any further issue I needed to completely disable it, I'd like to be able to do so. – WizLiz – 2015-08-05T08:11:29.480

2@WizLiz - but exception for safe applications defined at threat-prevention software (e.g. Windows Defender or antivirus) are not considered a workarounds! It is valid solution. It is the goal of the exception list. If the exception works, keep it as it is, there is no other more recommended way like this. Do you really think it is better to disable your protection software instead? – miroxlav – 2015-08-05T08:18:35.957

Also see this thread: Disable Windows Defender in Windows 10: http://superuser.com/questions/947873/disable-windows-defender-in-windows-10/1009656#1009656

– XP1 – 2015-12-05T23:42:02.417

Related: Windows Defender: Disable real time; keep scheduled and on demand scanning

– Marc.2377 – 2016-08-18T09:31:31.753

Answers

13

Type in Defender into the search bar, and click on the Defender program in the list. When Windows Defender opens, click Settings and turn off real time protection.

I just noticed that it will reenable it automatically after some time, geez.

I suppose you will could install some third-party antivirus software that does not flag hack tools and such as a threat.

.

There is a third-party application called NoDefender to disable it permanently, but I have not tried it or can vouch for it or what it actually does to accomplish this.

I found this note on another website, but I am not sure if it is true or not. Better make a restore point anyway.

NOTE: The NoDefender utility doesn’t include an option to enable Windows Defender again. So we suggest you create a manual system restore point before disabling Defender if you want to easily enable Windows Defender again in the future.

.

Another method is to rename the Defender program folder. This must be done from a Linux Live DVD or USB: C:\Program Files\Windows Defender.

Another method is to disable the Defender Service from starting in the Windows registry as it cannot be done from Services directly as options are grayed out.

Open regedit and go to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend

Open the subkey corresponding to the service you wish to change (WinDefend), and modify the value of 'Start' to equal either "2" (for automatic), "3" (for manual), or "4" (for disabled).

**Registry edits have the advantage for Windows Home or lower versions, as they do not have Group Policy Editor to do it as suggested by Nate's answer.

Moab

Posted 2015-08-04T19:55:19.377

Reputation: 54 203

I'll try the registry edit when I come home. I don't like the idea of installing a third party software that turn it off without turning it back on. I already have malwarebytes premium installed if that's worth anything. – WizLiz – 2015-08-05T06:38:38.307

MBAM is not AV, but is better than nothing. – Moab – 2015-08-05T21:23:56.533

@user1133275 Everybody has an opinion, thanks for making yours known. There is no group policy in Home versions of W10, so that answer is useless, besides all group policy does is make Registry changes. – Moab – 2016-05-13T18:20:58.077

@Moab Thanks for the information, Nate's answer looks best for those using home versions. Please update your answer to combine the 2. (I can only change my vote after you make an edit) – user1133275 – 2016-05-13T20:01:53.520

1Windows automatically turns this on THE VERY NEXT DAY though, unfortunately. Man, I hate Microsoft. – paddotk – 2016-05-18T17:59:16.570

@poepje not if you use the app. I feel your hate....they suck even more with w10 – Moab – 2016-05-18T20:45:28.893

@Moab I'm not sure what you mean? Naturally it's an app. And it's built-in in Windows (using Win10) so I can't deactivate or uninstall it in any conventional way. – paddotk – 2016-05-19T12:07:47.667

35

In Windows 10 Professional, you can disable Windows Defender via the Local Group Policy Editor (gpedit.msc) by enabling the Turn off Windows Defender policy in the following location:

Computer Configuration/Administrative Templates/Windows Components/Windows Defender

In Windows 10 Home, it can also be done via an elevated command prompt:

reg add  "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1

To roll back:

reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection"

Kaelan Fouwels

Posted 2015-08-04T19:55:19.377

Reputation: 493

4just need to mention that local group policy editor or gpedit.msc is only available in windows pro edition – MujtabaFR – 2016-08-17T03:27:20.567

Windows Starter Edition, Home and Home Premium do not include gpedit, how do I install it? - shameless plug, I wrote the question and answer :) – DavidPostill – 2018-06-12T20:28:20.350

8

This isn't a solution to turn off Windows Defender entirely, but I think it's a better solution to what you're actually looking for. You can turn off Defender's Realtime Protection, without turning off Defender altogether. If you want to be able to use Defender to do on-demand scans (not realtime scanning), then this solution is useful.

  1. Open up the registry editor with Start -> regedit.

  2. Navigate to Computer > HKEY_LOCAL_MACHINE > SOFTWARE > Policies > Microsoft > Windows Defender

  3. Navigate to Real-Time Protection. If that key doesn't exist, create it under the Windows Defender folder. (note the space between "Time" and "Protection")

  4. Inside Real-Time Protection, add a new DWORD value.

  5. Name it DisableRealtimeMonitoring and give it a value of 1.

You may need to reboot. This will now allow Windows Defender to run on-demand, but if you look in the Defender settings, real-time protection will be turned off and grayed out.

Nate

Posted 2015-08-04T19:55:19.377

Reputation: 199

This just disables Real-Time Protection it does not actually disable Windows Defender, which the existing answer, does actually. – Ramhound – 2016-02-07T04:27:26.880

5

Save this text as a .reg file and execute:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender]
"DisableAntiSpyware"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection]
"DisableRealtimeMonitoring"=dword:00000001

This disables only realtime which helps to speed up the computer.

Set the first value to 00000001 to fully disable it.

Falco Alexander

Posted 2015-08-04T19:55:19.377

Reputation: 896

4

Considering your specific goal, do nothing – you are solving an XY problem.

I could post an answer on how to turn it off, but based on the background you shared, I decided to give a different answer.

As you told in comments, you already have an exception added into Windows Defender which allows your software to work as expected. In your question you did not indicate any performance or compatibility or other issues which in some corner cases can be reason for disabling the protection tool completely.

To address only the blocking issues, you have found the proper solution. This is the purpose of exception lists in threat-prevention software and you used it in the right way. You gave no reason why it is necessary to disable the entire protection instead of adding just one exception.

Any weakening of security of your computer is generally only worse. Do not switch off Windows Defender if the problem has a valid working solution (for example, using the exception list).

Alternatively you can replace Windows Defender with other protective software, e.g. with an antivirus program or some security suite. (They will turn off Windows Defender, too.) But it may happen that they will cause a conflict with your application, too, and you will end up adding a new item into the exception lists as you did it for Windows Defender.

miroxlav

Posted 2015-08-04T19:55:19.377

Reputation: 9 376

I already received 3 downvotes for this answer, but based on original question which also provided reasoning for disabling the Defender, this answer still stands. Although there could be valid cases for switching off the Defender, in this particular question, turning off the Defender was solving the actual problem wrong way. It's like when you ask car mechanic for disabling airbags in your car because sometimes "check airbags" indicator is displayed and you do not like that indicator. – miroxlav – 2016-12-08T13:49:17.547

9Please only give answers that answer the question. – srchulo – 2017-01-18T04:54:04.400

@srchulo – In case of questions asking to do something considered bad practice it is good to have at least one answer which warns about problems of such a "solution". Perhaps you know well it is common on [so] site. Is this site different? Do you think the question would be answered more completely if this answer was missing? This answer makes readers more aware about proper approach on disablement of system protection. Some users do not like warnings about their risky technical approach, but some still do. The score of the answer is now +4/-4. – miroxlav – 2017-04-09T00:17:10.487

4Because Microsoft Defender inhibits the normal use of the computer, using up to 100% of the available disk bandwidth and a huge amount of CPU power, to do basically nothing. When there is no threat detected, spending 100% of your disk IO time to have realtime "protection" is a joke. Windows defender won't find the zero days that are likely to appear on regular systems anyways. It's a worthless piece of garbage. That's why. – Warren P – 2018-02-07T16:49:54.400

@WarrenP – OP stated that Windows Defender is blocking third party software. The problem is blocking and not emotional relationship to Windows Defender which you expressed in your comment, but it was not indicated in OP's question. Solution to OP's problem as it was described (only blocking the app, no performance or other issues) is adding the program to the exception list. Please consider re-evaluating the question/answer from less emotional viewpoint. – miroxlav – 2018-03-12T22:49:23.850

@WarrenP – recent score (2018-03-09) of Windows Defender is 5 out of 10. This is definitely better than 0 of 10 what you get after switching it off without a replacement. Please keep the discussion in "be nice" tone expected in SE network.

– miroxlav – 2018-03-15T20:21:08.727

10 out of 10 and 10 out of 10 are all subjective. Did you notice what subjective means? It means, not based on anything more than human feelings. An odd appeal from you. – Warren P – 2018-03-16T03:06:23.557

@WarrenP – Windows Defender ranked one of the best antivirus solutions 2019-08-12 Time to reconsider? ;)

– miroxlav – 2019-09-27T16:45:54.837

Windows Defender is in a class of software (antivirus solutions) that are known to cause problems worse than the ones they solve for a large percentage of their user base. I will admit Windows Defender is currently one of the Least Bad Options out there, but that doesn't mean it's a Good product, yet.

I now recommend the user continue to use Windows Defender unless there was a better product that they could use instead. – Warren P – 2019-09-30T16:38:58.143

2

@WarrenP – I went through five anti-virus programs in last years and Defender caused the least problems of them all. Defender may have problems but if we want to generalize this claim, all other anti-virus programs have confirmed problems, too. Just check posts on their support forums. We are discussing under Q/A where no disablement was actually necessary. Appropriately addressing XY problems like this question by giving answer like mine is a common practice across all technology Stack Exchange sites.

– miroxlav – 2019-09-30T17:09:54.577

I agree. This is a typical flailing around (XY) thing. It's sad that we can't trust these tools though, and we're all flailing around until we can get work done. – Warren P – 2019-10-01T19:11:30.633