+- MHH AUTO (https://mhhauto.com)
+-- Forum: MHH AUTO FORUMS. (https://mhhauto.com/Forum-MHH-AUTO-FORUMS)
+--- Forum: General Automotive Help & Discussions. (https://mhhauto.com/Forum-General-Automotive-Help-Discussions)
+---- Forum: Daimler Group Mercedes-Benz, Smart Discussions. (https://mhhauto.com/Forum-Daimler-Group-Mercedes-Benz-Smart-Discussions)
+---- Thread: Permanently Disable Windows Defender (/Thread-Permanently-Disable-Windows-Defender)
Permanently Disable Windows Defender - bimmerdriver - 04-16-2026
The last time I installed WIS/ASRA and Xentry, I couldn't keep Windows Defender from restarting after a reboot.
I was using the following method:
1. Disable Tamper Protection
2. Use gpedit to enable Local Computer Policy / Computer Configuration / Administrative Templates / Windows Components / Microsoft Defender Antivirus / Turn off Microsoft Defender Antivirus
This used to work, but it no longer survives reboot.
I searched and found a new method that is easy and survives reboot.
1. Disable Tamper Protection
2. Use gpedit to enable Local Computer Policy / Computer Configuration / Administrative Templates / Windows Components / Microsoft Defender Antivirus / Real-time Protection / Turn off real-time protection
3. gpupdate / force
After you do this, Windows Security / Virus & thread protection / Virus & threat protection settings will show that Real-time protection is off and it stays off after a reboot.
I did this on Windows 11 IoT Enterprise LTSC Hyper-V VM. I didn't test it running not in a VM.
If you're running Windows 11 Home, I attached a screen capture of the registry key. I didn't test it, but I presume it will work the same, although I'm not sure if you can make it stick without gpupdate / force.
RE: Permanently Disable Windows Defender - ghostrider85 - 04-16-2026
you can also use this remover:
Code:
https://github.com/ionuttbara/windows-defender-removerRE: Permanently Disable Windows Defender - Darkshado87 - 04-16-2026
(04-16-2026, 10:55 AM)ghostrider85 Wrote: you can also use this remover:
Code:https://github.com/ionuttbara/windows-defender-remover
I use this all the time, it works perfect.
RE: Permanently Disable Windows Defender - bimmerdriver - 04-16-2026
I should have also mentioned that to enable Windows Defender, all you have to do is the following:
1. Use gpedit to unconfigure Local Computer Policy / Computer Configuration / Administrative Templates / Windows Components / Microsoft Defender Antivirus / Real-time Protection / Turn off real-time protection
2. gpupdate / force
After that, it returns to normal operation.
This method is permanent, but also can be reversed as easily.
RE: Permanently Disable Windows Defender - gcs190 - 04-17-2026
Unless it's a system with very limited resources, I prefer to disable only the cloud analysis options, automatic sample upload, and the rest of the options, leaving real-time protection active. On the computers where I have it disabled, nothing gets in without first going through a test computer.
RE: Permanently Disable Windows Defender - bimmerdriver - 04-20-2026
(04-17-2026, 04:17 PM)gcs190 Wrote: Unless it's a system with very limited resources, I prefer to disable only the cloud analysis options, automatic sample upload, and the rest of the options, leaving real-time protection active. On the computers where I have it disabled, nothing gets in without first going through a test computer.
The reason I like to be able to enable real-time protection is because I prefer to only have it disabled when it needs to be disabled. Otherwise, I exclude the specific file or folder, then enable it.
RE: Permanently Disable Windows Defender - Alex123222 - 04-20-2026
Here is Defender Control
You can turn it on/off
RE: Permanently Disable Windows Defender - nilshn29 - 04-20-2026
(04-16-2026, 09:34 AM)bimmerdriver Wrote: The last time I installed WIS/ASRA and Xentry, I couldn't keep Windows Defender from restarting after a reboot.Download DefenderControl from Sordum
I was using the following method:
1. Disable Tamper Protection
2. Use gpedit to enable Local Computer Policy / Computer Configuration / Administrative Templates / Windows Components / Microsoft Defender Antivirus / Turn off Microsoft Defender Antivirus
This used to work, but it no longer survives reboot.
I searched and found a new method that is easy and survives reboot.
1. Disable Tamper Protection
2. Use gpedit to enable Local Computer Policy / Computer Configuration / Administrative Templates / Windows Components / Microsoft Defender Antivirus / Real-time Protection / Turn off real-time protection
3. gpupdate / force
After you do this, Windows Security / Virus & thread protection / Virus & threat protection settings will show that Real-time protection is off and it stays off after a reboot.
I did this on Windows 11 IoT Enterprise LTSC Hyper-V VM. I didn't test it running not in a VM.
If you're running Windows 11 Home, I attached a screen capture of the registry key. I didn't test it, but I presume it will work the same, although I'm not sure if you can make it stick without gpupdate / force.