{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreihiqofeckg5ujuscanhlf7rdpyxohlg4arhieosxvj4famgxha5rm",
    "uri": "at://did:plc:ws6dhxzqnqxu5aqxt4kd27oc/app.bsky.feed.post/3mmydiqs6a5u2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreieaaftrqxmb7hyl2k5chtvza2mf74wauicldryuw6hmhi6o2t4eje"
    },
    "mimeType": "image/webp",
    "size": 63896
  },
  "description": "From a quick real-time toggle to Group Policy and registry methods, here is how to control Microsoft Defender on any edition.",
  "path": "/windows-security-in-windows-11-switch-protection-on-or-off/",
  "publishedAt": "2026-05-29T10:32:37.000Z",
  "site": "https://allthings.how",
  "tags": [
    "Windows Security overview"
  ],
  "textContent": "Windows Security is the built-in protection suite in Windows 11, and it runs Microsoft Defender Antivirus by default the moment you sign in. It handles real-time scanning, firewall controls, SmartScreen, ransomware safeguards, and account protection from one app. Turning it off is sometimes useful, such as when a known-safe file gets blocked or you are installing a different antivirus, but the way you disable it depends on whether you want a short pause or a lasting change.\n\n🛡️\n\nQuick answer: Open Settings > Privacy & security > Windows Security > Virus & threat protection > Manage settings and switch Real-time protection to Off for a temporary pause. For a lasting change on Windows 11 Pro, use the Turn off Microsoft Defender Antivirus Group Policy after disabling Tamper Protection.\n\n* * *\n\n## Open the Windows Security app first\n\nEvery method starts in the Windows Security app, which is your central dashboard for Virus & threat protection, Firewall & network protection, Account protection, App & browser control, Device security, and more. You can read about what each area does on Microsoft's Windows Security overview.\n\n**Step 1:** Press `Windows + I` to open Settings. You can also right-click the Start button and choose Settings.\n\n**Step 2:** Click **Privacy & security** in the left pane, then click **Windows Security** on the right.\n\n**Step 3:** Click the **Open Windows Security** button to launch the app. From the home screen you will see each protection area and its current status.\n\nYou can also reach the app from the shield icon in the taskbar corner, the Start menu's All apps list, or by typing **Windows Security** into search.\n\nThe Windows Security app brings every protection area into one dashboard.\n\n* * *\n\n## Temporarily disable Windows Security (real-time protection)\n\nThis is the supported, reversible method. It pauses active scanning without uninstalling anything, which is ideal for installing a build or reaching a file you trust.\n\n**Step 1:** In Windows Security, click **Virus & threat protection**.\n\n**Step 2:** Under **Virus & threat protection settings**, click **Manage settings**.\n\n**Step 3:** Switch **Real-time protection** to Off and confirm the User Account Control prompt if one appears. You can also toggle Cloud-delivered protection, Automatic sample submission, and Controlled folder access from the same screen.\n\nTo turn it back on, return to the same screen and switch Real-time protection back to On.\n\n⏱️\n\nReal-time protection is designed to switch back on automatically after a short time or at the next restart. This toggle is meant for quick tasks, not long-term off states.\n\n* * *\n\n## Disable Tamper Protection before any lasting change\n\nTamper Protection blocks unauthorized changes to Defender settings. If it is on, Group Policy and registry edits get reversed the next time the PC reboots, so you must turn it off first.\n\n**Step 1:** Open Windows Security and go to **Virus & threat protection > Manage settings**.\n\n**Step 2:** Scroll down and switch **Tamper Protection** to Off, then confirm the prompt.\n\nOn managed or work devices, this setting may be greyed out because it is controlled centrally. In that case, the change must come from IT, and local edits will be ignored.\n\n* * *\n\n## Permanently disable Microsoft Defender on Windows 11 Pro (Group Policy)\n\nGroup Policy is the supported way to keep Defender's antivirus off on Pro, Enterprise, and Education editions. The Local Group Policy Editor is not available on Windows 11 Home.\n\n**Step 1:** Press `Windows + R`, type `gpedit.msc`, and press Enter.\n\n**Step 2:** Navigate to `Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus`.\n\n**Step 3:** Double-click **Turn off Microsoft Defender Antivirus** , select **Enabled** , click Apply, then OK.\n\n**Step 4:** Restart the PC for the change to take effect.\n\nTo reverse it, set the same policy back to **Disabled** or **Not Configured** and reboot. You can also re-enable antivirus from the **Turn On** button inside Windows Security without reopening the editor.\n\n* * *\n\n## Windows 11 Home registry method (legacy and unreliable)\n\nWindows 11 Home does not include gpedit.msc, so older guides point to a registry edit. Be aware that the `DisableAntiSpyware` key is a legacy setting. It is removed or ignored on many modern builds, and Tamper Protection can block it outright. Treat it as fragile and back up the registry or create a System Restore point first.\n\n**Step 1:** Press `Windows + R`, type `regedit`, and press Enter.\n\n**Step 2:** Go to `HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows Defender`.\n\n**Step 3:** Right-click the empty area, choose **New > DWORD (32-bit) Value**, name it `DisableAntiSpyware`, and set its value to `1`.\n\n**Step 4:** Restart the PC. To undo it, set the value to `0` or delete the DWORD, then reboot.\n\n⚠️\n\nBecause this key is deprecated, a future Windows update may reapply protection or ignore the value entirely. Do not rely on it as a guaranteed permanent off switch.\n\n* * *\n\n## Which method to use\n\nMethod| Edition| Scope| Reverses on its own?\n---|---|---|---\nReal-time protection toggle| All| Temporary pause of scanning| Yes, after a short time or reboot\nGroup Policy (Turn off Microsoft Defender Antivirus)| Pro / Enterprise / Education| Lasting antivirus disable| No, stays off until changed\nRegistry (DisableAntiSpyware)| Home (legacy)| Lasting but unreliable| Possibly, after updates\n\n* * *\n\n## How to confirm it worked\n\nOpen Windows Security and check the **Virus & threat protection** area. If the antivirus is disabled through Group Policy or the registry, you will see Virus & threat protection listed as off, and you can switch it back on with a **Turn On** button when you want protection again. When only the real-time toggle is off, Windows shows repeated notifications urging you to turn it back on.\n\nThe shield icon in the taskbar does not disappear even after disabling the antivirus. That icon belongs to the overall Windows Security app, not just the antivirus engine, so it stays put. Other parts of the suite, such as the Microsoft Defender Firewall, also keep working unless you turn them off separately.\n\n* * *\n\n## What happens to protection after you turn it off\n\nWith the antivirus disabled, you lose real-time scanning, automatic virus definition updates, and ransomware safeguards. If you are deliberately switching to a different product, install a reputable third-party antivirus first. Windows recognizes many of these products and turns off Microsoft Defender's real-time scanning automatically. If you later uninstall that third-party app, Microsoft Defender Antivirus turns itself back on.\n\nFor a one-off blocked file, a safer alternative than disabling everything is to add a narrow exclusion under **Virus & threat protection > Manage settings > Add or remove exclusions**. That keeps global protection active while letting the specific file through. If you do disable protection, keep the off-window short and re-enable Tamper Protection once you are done.",
  "title": "Windows Security in Windows 11: Switch Protection On or Off",
  "updatedAt": "2026-05-29T10:32:40.493Z"
}