How to Disable Windows Security (Microsoft Defender) on Windows: Safe and Practical Methods

Windows Security — powered by Microsoft Defender Antivirus — provides essential protection against malware, ransomware, and other threats. However, there are legitimate scenarios where advanced users or IT professionals may need to temporarily or permanently disable Windows Security (for example, during software testing, troubleshooting, or when using alternative security software).

In this guide, we explain how to disable Windows Security (Microsoft Defender) on Windows 10 and Windows 11 using built-in tools, policy settings, and registry methods — and important warnings to help you avoid unnecessary risk.

Important: Disabling your antivirus protection significantly increases your exposure to threats. Only disable it if you understand the risk and have an alternate protection strategy in place.

What “Disabling Windows Security” Actually Means

Windows Security comprises:

• Microsoft Defender Antivirus (real-time scanning)
• Tamper Protection
• Ransomware protection and cloud-based threat intelligence

When people say “disable Windows Security,” they are usually referring to turning off Microsoft Defender Antivirus and its protections — either temporarily or permanently.

Option 1: Temporarily Turn Off Real-Time Protection

This is the easiest and safest temporary method:

1. Open Windows Security from the Start menu
2. Click Virus & threat protection
3. Choose Manage settings (under Virus & threat protection settings)
4. Turn off Real-time protection

This disables background scanning but Windows will re-enable it automatically after a short time or after reboot to protect your system.

Use case:

• Temporary testing
• Installing an app that Defender is blocking incorrectly

Important: Your PC will be vulnerable during this time, so don’t leave it off long.

Option 2: Turn Off “Tamper Protection” First

Tamper Protection prevents unauthorized changes to Defender settings. To make permanent changes:

1. Go to Windows Security → Virus & threat protection → Manage settings
2. Toggle Tamper Protection off
3. Confirm via User Account Control (UAC)

Once Tamper Protection is disabled, Windows will allow deeper configuration via policy or registry.

Warning: Disabling this feature reduces your system’s ability to resist malware that tries to change security settings.

Option 3: Permanently Disable via Local Group Policy

This method works on Windows Pro, Enterprise, or Education editions:

1. Press Win + R, type gpedit.msc, and press Enter
2. Go to:
   Computer Configuration → Administrative Templates → Windows Components → Microsoft Defender Antivirus
3. Find Turn off Microsoft Defender Antivirus
4. Double-click it and set it to Enabled
5. Restart your PC

After this, Defender’s antivirus service won’t start automatically.

Note: Group Policy Editor is not available in Home editions unless manually added, and Microsoft may revert some settings with major Windows updates.

Option 4: Disable via Registry Editor (Windows Home or Pro)

For systems without Group Policy Editor:

1. Press Win + R → regedit → Enter
2. Navigate to:
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
3. Create a new DWORD (32-bit) Value named:
   DisableAntiSpyware
4. Set its value to 1
5. Restart your PC

This tells Windows not to start Defender at boot.

Caution: Editing the Registry incorrectly can cause system instability. Always back up the registry and create a restore point before making changes.

Option 5: Disable Real-Time Protection via Registry

Another registry approach targets real-time monitoring directly:

1. Open Registry Editor
2. Go to:
   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection
3. Create or edit:
   DisableRealtimeMonitoring
4. Set its value to 1
5. Restart your PC

This effectively turns off real-time scanning until policies or registry keys are reversed.

Tip: You can re-enable protection later by deleting this entry or setting the value back to 0.

Option 6: Install Third-Party Antivirus

Windows automatically disables Defender real-time protection when a certified third-party antivirus is installed. Once a new AV solution takes over, Defender steps back to avoid conflicts.

This is often the best approach if you need protection while also disabling Windows Security — because a replacement solution fills the gap.

Why Some Methods Fail to Permanently Disable Defender

• Windows may re-enable real-time protection after reboot if Tamper Protection is on. [[turn0search1]]
• Some settings get reset by Windows updates.
• Defender’s service and Security Center services are designed to resist easy disabling.

Because of this, even advanced methods can be temporary unless properly combined with policy/registry changes.

Risks and Security Warnings

Disabling Windows Security leaves your system open to:

• Malware and ransomware
• Unauthorized access
• Drive-by downloads
• Phishing and malicious executables

Without on-device protection, threats can compromise your data, credentials, and network connections — and such exposures can happen quickly. If you disable Windows Security:

• Ensure you install a trusted alternative antivirus
• Keep your system offline during vulnerability windows
• Update other defense layers like the firewall and software patches

Experts generally recommend never disabling your only active antivirus permanently unless absolutely necessary.

How to Re-Enable Windows Security

If you’ve disabled it using Group Policy or the registry:

1. Reverse the Group Policy setting (Turn off Microsoft Defender Antivirus → Disabled)
2. Delete or set the DisableAntiSpyware registry DWORD to 0
3. Enable Tamper Protection
4. Turn on Real-time protection in Windows Security app settings

This restores default protections.

FAQ

Can I disable Windows Security permanently?
Yes — using Group Policy or registry changes — but it’s not recommended without a replacement antivirus solution.

Will Windows automatically re-enable Defender?
Yes — real-time protection may come back on reboot or after updates if Tamper Protection is enabled or policy isn’t set to force it off.

Can I disable Defender on Windows Home?
You can use registry methods since Group Policy Editor is unavailable by default.