Additional Microsoft Defender tools and services that provide security across various platforms and environments
This is a confirmed Microsoft issue, not necessarily that Microsoft Defender Antivirus is actually off.
On Windows 11 version 25H2, after installing the latest Microsoft Defender Antivirus updates, notifications can appear saying "Microsoft Defender Antivirus is turned off" even though Defender is functioning correctly and settings still show it as active. These notifications can appear at startup and intermittently afterward, and they can continue even if notification settings are turned off.
Microsoft states that a fix is being worked on and will be released in a future Microsoft Defender Antivirus update.
If Defender shows as active in Windows Security, the notification is currently a false alert. If needed, the issue can be reported through the Feedback Hub app using WIN+F.
References: