How to Disable Windows Defender Permanently on Windows 10 and Windows 11

Learn how to permanently disable Windows Defender on Windows 10 & 11 using Registry, Group Policy, or PowerShell, with step-by-step instructions.

Disabling Windows Defender permanently can be necessary when you need to install certain software, run customized security setups, or rely on a third‑party antivirus. In this guide, we’ll walk through every step on how to turn off Windows Defender permanently on both Windows 10 and Windows 11.

How to Disable Windows Defender Permanently

We will also cover troubleshooting if Defender re‑enables after restart, and discuss risks of disabling Defender as well as alternatives & complementary security measures.

What is Windows Defender Role in Windows Security

Windows Defender is Microsoft’s built‑in antivirus and anti‑malware solution integrated into the Windows Security Center. It provides real‑time protection, automatic scans, and firewall capabilities. While its default configuration serves most users well, there are scenarios—such as testing software in a sandbox, gaming performance optimization, or deploying a corporate security suite—where you may wish to disable Windows Defender permanently. Before proceeding, it’s crucial to understand:

Defender’s core functions: file scanning, cloud‑based threat detection, firewall management.
How Defender integrates with Windows Security settings, including Windows Defender exclusions and real‑time protection toggle.
The distinction between temporarily disabling Windows Defender (via the Windows Security app) and permanent disable (via policy, registry, or command‑line).

Knowing what you’re turning off—and why—will help you make informed choices and avoid unexpected gaps in your security posture.

Preparing to Disable Windows Defender Permanently

Before making any system‑level changes, back up your system and registry to safeguard against misconfigurations:

Backup Your Registry and Create a System Restore Point

Editing the Windows Registry or Group Policy can have unintended effects. To disable Defender via Registry Editor, you will create and modify keys under HKLM\SOFTWARE\Policies\Microsoft\Windows Defender. Always export the current branch and set a restore point:

Open System Properties ➔ System Protection ➔ Create.
Name your restore point (e.g., “Pre‑Disable Defender”).
In Registry Editor (regedit.exe), right‑click the Windows Defender key, choose Export, and save the .reg file.

These precautions let you revert if the system behaves unexpectedly.

How to Disable Windows Defender Permanently

Method 1: Disable Windows Defender via Windows Security Settings

Windows Security provides a simple interface to toggle off real‑time protection, but this method is temporary and Defender re‑enables after restart.

Turn Off Real‑Time Protection in Windows Security

Navigate to Start ➔ Settings ➔ Privacy & Security ➔ Windows Security ➔ Virus & Threat Protection ➔ Manage Settings. Here, switch off Real‑time Protection and Cloud‑delivered Protection.

You may see a prompt confirming you want to turn off Windows Defender via Windows Security; accept to proceed.

Limitations of the Windows Security Method

Because Microsoft designed Defender to re‑activate at each boot for baseline protection, this approach only temporarily disables Windows Defender. If you need a permanent disable, proceed to the Group Policy or Registry methods below. Use this method only when you need a quick, one‑off suspension of antivirus scans (for instance, when installing certain development tools that Defender might flag).

Method 2: Permanently Disable Windows Defender Using Group Policy Editor

For Windows 10/11 Pro, Enterprise, and Education editions, Group Policy Editor (gpedit.msc) offers a reliable way to permanently disable Defender Windows 10/11.

Opening the Group Policy Editor

Press Win + R, type gpedit.msc, and press Enter. In the Local Group Policy Editor window, expand Computer Configuration ➔ Administrative Templates ➔ Windows Components ➔ Microsoft Defender Antivirus.

Configuring Defender Settings via gpedit.msc

Locate the policy named “Turn off Microsoft Defender Antivirus”. Double‑click it and select Enabled, then click Apply and OK. This configuration tells Windows to disable Microsoft Defender permanently and prevents Defender from initializing on startup.

Applying and Verifying the Group Policy

After enabling the policy, open an elevated Command Prompt and run gpupdate /force. Then, check Services (services.msc) for the WinDefend service; it should be set to Disabled and not running. You can also revisit Windows Security to see that Real‑time Protection options are grayed out, confirming a successful Windows Defender group policy permanent disable.

Method 3: Permanently Disable Windows Defender via Registry Editor

When Group Policy Editor isn’t available (e.g., Windows 10/11 Home), you can disable Defender via Registry Editor to achieve a permanent disable.

Editing the HKLM Registry to Turn Off Windows Defender

Open Registry Editor (regedit.exe) and navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

If the Windows Defender key doesn’t exist, create it.

Creating and Editing the DisableAntiSpyware Key

Inside the Windows Defender key, right‑click on the right pane, choose New ➔ DWORD (32‑bit) Value, name it DisableAntiSpyware, and set its value to 1. This registry edit not only disables Windows Defender but also prevents future automatic re‑enabling, achieving a permanent disable.

Restarting and Verifying Registry Changes

Restart your PC. After reboot, open Windows Security or Services to confirm that Defender is inactive. If Defender still shows active components, double‑check the registry path and value, and ensure there are no conflicting policies under Windows Defender\Real-Time Protection keys.

Method 4: Disabling Windows Defender via Command‑Line & PowerShell

For script‑based automation or deployment scenarios, you can disable Windows Defender command line or use PowerShell to disable Windows Defender.

Using Command Prompt to Stop WinDefend Service

Launch an elevated Command Prompt and run:

sc config WinDefend start= disabled
sc stop WinDefend

This sequence stops the Defender service (WinDefend) and prevents it from starting at boot, effectively turning off Windows Defender via command line.

Using PowerShell to Disable Windows Defender

Open an elevated PowerShell window and execute:

Set-MpPreference -DisableRealtimeMonitoring $true
Set-MpPreference -DisableBehaviorMonitoring $true
Stop-Service -Name WinDefend -Force

The Set‑MpPreference cmdlets disable real‑time protection toggle and behavior monitoring, while Stop-Service halts the Defender service.

Automating the Disable Process with Scripts

Combine the above commands into a .ps1 script to distribute across multiple machines. Ensure the execution policy allows running your script (Set‑ExecutionPolicy RemoteSigned) and include error handling to detect if Defender won’t disable or re‑enables after restart.

Troubleshooting Common Issues When Disabling Defender

Even after following these methods, Windows Defender may resist being turned off or keep re‑enabling after restart. Here’s how to tackle these problems.

Windows Defender Won’t Disable or Re‑Enables After Restart

If Defender returns after reboot despite Group Policy or Registry tweaks, check for:

Conflicting keys under HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection (e.g., DisableBehaviorMonitoring set to 0).
Third‑party AV installations that automatically re‑enable Defender to maintain a baseline shield.

Remove or correct conflicting registry entries, then re‑apply your disable method.

Fixing “Can’t Turn Off Windows Defender” Errors

Errors like “This setting is managed by your administrator” indicate an active Group Policy or MDM policy. Run rsop.msc (Resultant Set of Policy) to identify the controlling policy, then adjust accordingly. On domain‑joined machines, coordinate with IT to update domain‑level policies.

Dealing with Conflicts and Exclusions

Sometimes Windows re‑enables Defender to protect critical system files. Use Windows Defender exclusions (via Registry or PowerShell Add-MpPreference -ExclusionPath) to exempt specific folders, then disable real‑time scans. This hybrid approach lets you maintain Defender in a minimal state without fully turning it on.

Alternatives & Related Concerns After Disabling Defender

Disabling Defender exposes you to threats if no other protections are in place. Consider these Windows Defender alternatives and safety precautions.

Installing Third‑Party Antivirus Software to Disable Defender

Windows automatically disables Defender when a compliant third‑party AV is installed. Popular choices include Bitdefender, Kaspersky, and Norton. During installation, these tools set the appropriate registry and Group Policy flags to turn off Windows Defender permanently and manage AV responsibilities.

Risks and Precautions When You Permanently Disable Microsoft Defender

Completely turning off your built‑in antivirus invites malware, ransomware, and phishing attacks. To mitigate risks:

Ensure regular backups and offline restore points.
Use a firewall appliance or software firewall alternative.
Schedule frequent manual scans with your chosen AV.
Keep Windows and all applications patched.

Configuring Defender Exclusions and Complementary Security Measures

If full disablement feels too risky, you can apply a partial approach: disable real‑time protection but retain on‑demand scans, or set up Defender exclusions for development folders and high‑performance applications. Complement this with network monitoring, intrusion detection, and sandboxing tools to maintain a robust security stance.

Conclusion

Disabling Windows Defender permanently on Windows 10 and Windows 11 can be achieved through multiple avenues: the built‑in Windows Security app (temporary), Group Policy Editor (permanent on Pro/Enterprise/Education), Registry Editor (permanent on Home), and command‑line or PowerShell scripts for automation.

Each method has its place depending on your edition of Windows and security requirements.

Always back up your system before making changes, and consider installing a reputable third‑party antivirus or using a hybrid disable‑exclusion strategy to keep your PC protected. By following the detailed steps above, you’ll be able to turn off Windows Defender permanently while managing the associated risks effectively.

Visit Our Post Page: Blog Page