3 ms·
If you use Windows Pro and Enterprise, you can use GPO to disable Defender. Just run gpedit.msc and edit a few of the policies to disable real-time protection e
by Renaud 4y ago
If you use Windows Pro and Enterprise, you can use GPO to disable Defender. Just run gpedit.msc and edit a few of the policies to disable real-time protection etc.
Under Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus
- Turn off Microsoft Defender Antivirus -> set to Enabled
Under Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > Real-Time Protection
- Turn on behavior monitoring -> set to Disabled
- Monitor file and program activity on your computer -> set to Disabled
- Turn on process scanning whenever real-time protection -> set to Disabled
- Turn on behavior monitoring -> set to Disabled
Restart the computer and Real-time protection should be disabled permanently (until you reverse the same settings through gpedit.msc at least).
- bob1029 4y agoYou can also elevate to Trusted Installer or System and completely remove this garbage from your computer. Alternatively, if you run windows server as your workstation OS, you can perform an uninstall using Remove-WindowsFeature from powershell. The old gpedit tricks don't really work anymore in my experience.
- zamadatix 4y agoWith 11 (or possibly newer versions of 10, haven't tried lately) this doesn't seem to actually disable MsMpEng.exe from loading anymore. Using something like https://github.com/jbara2002/windows-defender-remover https://github.com/jbara2002/windows-defender-remover seems to work though.