question

StanKasper-4297 avatar image
0 Votes"
StanKasper-4297 asked LimitlessTechnology-2700 answered

Windows 11 Group Policy Defender AntiVirus

WIndows 11 go into local group policy. Go to Microsoft Defender Antivirus and enable 'Turn off Microsoft Defender Antivirus'. Restart. The policy reverts back to 'not configured'. What are the steps necessary to properly disable Defender on Windows 11?

windows-11
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LeonLaude avatar image
0 Votes"
LeonLaude answered LeonLaude commented

Hi @StanKasper-4297,

You are no longer able to disable the Microsoft Defender by Group Policy for security reasons.
The only way to disable the Microsoft Defender is to install a third-party antivirus software, as that disables the Microsoft Defender.

140345-caution.png

Reference:
https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/security-malware-windows-defender-disableantispyware


If the reply was helpful please don't forget to upvote and/or accept as answer, thank you!


Best regards,
Leon


caution.png (14.6 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

How do 3rd parties disable it?

0 Votes 0 ·

I believe it is disabled via an API, but I do not have any deeper knowledge in this.

0 Votes 0 ·
StanKasper-4297 avatar image
0 Votes"
StanKasper-4297 answered

So... I have a 300 to 500M memory program Windows Defender running on a machine that is not connected to the Internet and therefore does not need it. How do I remove it?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hi @StanKasper-4297

Permanently disabling Windows Defender can be challenging. Methods that worked in Windows 10 don’t seem to work in Windows 11 anymore. What seems to work though is taking ownership of the Windows Defender executable and remove all permissions from it. This way the system principal can’t start the Microsoft Defender services. Having a third-party AV software is one method that turns off Microsoft Defender.


--If the reply is helpful, please Upvote and Accept as answer--

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.