Home → Windows 10 → Windows Defender → How to permanently disable Windows Defender Antivirus on Windows 10

1.1. How to permanently disable Windows Defender Antivirus on Windows 10

Windows Defender Antivirus is the free malware solution that Microsoft includes on every installation of Windows 10. It's a security software package meant to provide the first line of defense to protect your device and data against malware, including viruses, ransomware, rootkits, spyware, and other types of malicious programs.

Although the antivirus runs automatically, and it can disable itself as you install a third-party security software, the only caveat is that Windows 10 doesn't offer a way to disable it permanently. Perhaps the obvious reason is that Microsoft doesn't want you to use your device without any protection, which is a good thing.

However, there are still some cases where some users may prefer not to use Windows Defender Antivirus, such as on a kiosk device that isn't connected to a network and where peripheral connectivity isn't allowed.

How to disable Windows Defender Antivirus using Group Policy

On Windows 10 Pro, it's possible to use the Group Policy Editor to disable the Windows Defender Antivirus permanently.

  1. Use the Windows key + R keyboard shortcut to open the Run command.
  2. Type gpedit.msc and click OK to open the Local Group Policy Editor.

  3. Browse the following path:

    Computer Configuration > Administrative Templates > Windows Components > Windows Defender Antivirus

  4. On the right side, double-click the Turn off Windows Defender Antivirus policy.
  5. Select the Enabled option.
  6. Click Apply.
  7. Click OK.

  8. Browse the following path:

    Computer Configuration > Administrative Templates > Windows Components > Windows Defender Antivirus > Real-time Protection

  9. On the right side, double-click the Turn on behavior monitoring policy.

  10. Select the Disabled option.
  11. Click Apply.

  12. Click OK.

  13. On "Real-time Protection," double-click the Monitor file and program activity on your computer policy.

  14. Select the Disabled option.
  15. Click Apply.

  16. Click OK.

  17. On "Real-time Protection," double-click the Turn on process scanning whenever real-time protection is enabled policy.
  18. Select the Disabled option.
  19. Click Apply.

  20. Click OK.

  21. On "Real-time Protection," double-click the Turn on behavior monitoring policy.
  22. Select the Disabled option.
  23. Click Apply.

  24. Click OK.

  25. Restart your computer.

Once you've completed the steps, Windows Defender Antivirus will no longer scan and detect malware on your device, even after restarting your computer.

At any time, you can enable the Windows Defender Antivirus using the same steps, but on step No. 5, 10, and 14, make sure to select the Not Configured option. Then just restart your device to apply the changes.


This page was: Helpful | Not Helpful