This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 55.00000000000001%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
I enrolled a workstation into intune and it automatically enabled Defender even though another antivirus provider is already installed. I since created a policy to disable to the defender and disable tamper protect. The policies apply successfully to the work station. When you look in Virus and Threat protection it says defender is disabled but if you run task manager its running and I cannot disable the service because its access denied. This is causing major issues with our EDI software, I even tried leaving it running and setting exclusions but the defender is still not working with our EDI. I just want to disable the defender. How do you do this?
@Ray Thanks for posting in our Q&A.
For this issue, could you please show the screen shot about the settings you configured to disable defender in intune portal? And we will try to check if the registry key related to the target setting is correct.
If there is anything update, feel free to let us know.
policy settings.pdfHi, ive included the disable tamper protection, I had deleted the policy to disable but I've attached a copy of the policy I had. These settings applied successfully to the workstation and I had it excluded from the default policy.
I've since re-applied the same policy. You can see in the screen shot below its still running even though it says its not.
YI
@Ray Honestly, I haven't met this issue. Given this situation, it is suggested to create an online support ticket to check more information based on your specific environment to find the cause. Here is the support link:
Hi, a further update. I decided to remove the pc from MDM intune, I removed it from the Domain. Still Defender continues to run.