Microsoft windows antivirus turned off but it actually on

Bellahdi Youcef 10 Reputation points
2026-09-09T16:18:48.7966667+00:00

hey ,in providers it says that microsoft av is off but when i checked it was actually on and work without any problems what's happening??

Microsoft Security | Microsoft Defender | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-09-09T16:19:05.24+00:00

    This is a known issue in some recent Microsoft Defender Antivirus updates: Windows can show "Microsoft Defender Antivirus is turned off" notifications or provider status even when Defender is actually running correctly and all settings show it as active.

    What this means:

    • If real-time protection is on and scans are working, Defender can still be functioning normally.
    • The incorrect Security providers status can be a false notification, not an actual protection failure.
    • Microsoft has confirmed this issue and is working on a fix in a future Defender Antivirus update.

    A second possible cause is a non-Microsoft antivirus product:

    • On Windows 10 or Windows 11, if a non-Microsoft antivirus is installed and Microsoft Defender for Endpoint is not being used, Microsoft Defender Antivirus is automatically turned off.
    • If Microsoft Defender for Endpoint is being used with a non-Microsoft antivirus installed, Defender Antivirus starts in passive mode with reduced functionality.

    To check which case applies:

    1. Open Windows Security and confirm real-time protection is enabled.
    2. Open Services: select Search and type services or run services.msc.
    3. Check Microsoft Defender Antivirus Service under Windows Defender > Operational.
    4. If the service is set to manual and starting it shows a message like started and then stopped, that can indicate Defender was automatically turned off for compatibility with a non-Microsoft antivirus.
    5. If no third-party antivirus is installed and Defender is otherwise working, this is likely the known false notification issue.

    If the problem is only the incorrect notification/status, the current documented next step is to wait for a future Microsoft Defender Antivirus update. If needed, the issue can also be reported through Feedback Hub.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    10+ people found this answer helpful.
  2. Graham Eida 0 Reputation points
    2026-09-14T12:35:49.94+00:00

    For me, this incorrect reporting is having a knock on effect to InTune reporting, thus my laptop is not in company compliance blocking access. Have MS got a timeline for this to be resolved as the impact goes beyond the "nag" notification.

    Was this answer helpful?

    6 people found this answer helpful.
    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.