Additional Microsoft Defender tools and services that provide security across various platforms and environments
- Check whether another antivirus product is installed or still registered. On Windows 10 and Windows 11, Microsoft Defender Antivirus turns off automatically when another antivirus app is installed and turned on. If that other app is removed, Defender should turn back on automatically.
- Try turning on real-time protection directly:
- Open Windows Security from Start.
- Select Virus & threat protection.
- Select Virus & threat protection settings or Manage settings.
- Turn Real-time protection to On.
- If the Virus & threat protection page is missing the control, check whether Defender is being disabled by policy:
- Open Services by searching for
servicesor runningservices.msc. - Look under Windows Defender > Operational for Microsoft Defender Antivirus Service.
- If the service starts and then immediately stops, that can indicate Defender was automatically turned off for compatibility with a non-Microsoft antivirus.
- Open Services by searching for
- Check for policy settings that disable Defender:
- Open Command Prompt as administrator.
- Run:
GPresult.exe /h gpresult.html - Open the generated
gpresult.htmlreport. - Check under Windows Components/Microsoft Defender Antivirus for Turn off Microsoft Defender Antivirus.
- Also check for
DisableAntiSpywareentries in policy results.
- If multiple management methods were used, resolve policy conflicts. Microsoft recommends determining where Defender settings are configured and removing or revising conflicting policies. Using one management method gives the best results.
- If a third-party antivirus was previously installed, avoid running two real-time antivirus products together. Microsoft recommends uninstalling the previous security software before relying on Defender.
If Defender still shows as off after the previous antivirus has been removed and no disabling policy is present, the supported guidance in the provided material is limited to checking Windows Security, Services, and policy conflicts.