How to disable Windows Defender Antivirus using Group Policy

On Windows 10 Pro, it's possible to use the Group Policy Editor to disable the Windows Defender Antivirus permanently.

1. Use the Windows key + R keyboard shortcut to open the Run command.
2. Type gpedit.msc and click OK to open the Local Group Policy Editor.

3. Browse the following path:

   Computer Configuration > Administrative Templates > Windows Components > Windows Defender Antivirus

4. On the right side, double-click the Turn off Windows Defender Antivirus policy.
5. Select the Enabled option.
6. Click Apply.
7. Click OK.

8. Browse the following path:

   Computer Configuration > Administrative Templates > Windows Components > Windows Defender Antivirus > Real-time Protection

9. On the right side, double-click the Turn on behavior monitoring policy.

10. Select the Disabled option.
11. Click Apply.

12. Click OK.

13. On "Real-time Protection," double-click the Monitor file and program activity on your computer policy.

14. Select the Disabled option.
15. Click Apply.

16. Click OK.

17. On "Real-time Protection," double-click the Turn on process scanning whenever real-time protection is enabled policy.
18. Select the Disabled option.
19. Click Apply.

20. Click OK.

21. On "Real-time Protection," double-click the Turn on behavior monitoring policy.
22. Select the Disabled option.
23. Click Apply.

24. Click OK.

25. Restart your computer.

Once you've completed the steps, Windows Defender Antivirus will no longer scan and detect malware on your device, even after restarting your computer.

At any time, you can enable the Windows Defender Antivirus using the same steps, but on step No. 5, 10, and 14, make sure to select the Not Configured option. Then just restart your device to apply the changes.

How to disable Windows Defender Antivirus using Registry

The Local Group Policy Editor is not available on Windows 10 Home, but you can still achieve the same results changing the Registry settings.

Warning: This is a friendly reminder that editing the registry is risky, and it can cause irreversible damage to your installation if you don't do it correctly. It's recommended to make a full backup of your PC before proceeding.

1. Use the Windows key + R keyboard shortcut to open the Run command.
2. Type regedit, and click OK to open the Registry.

3. Browse the following path:

   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

4. Right-click on the Windows Defender (folder) key, select New, and click on DWORD (32-bit) Value.

5. Name the key DisableAntiSpyware and press Enter.
6. Double-click the newly created key and set the value from 0 to 1.

7. Click OK.

8. Right-click on the Windows Defender (folder) key, select New, and click on Key.

9. Name the key Real-Time Protection and press Enter.

10. Right-click on the Real-Time Protection (folder) key, select New, and click on DWORD (32-bit) Value.
11. Name the key DisableBehaviorMonitoring and press Enter.
12. Double-click the newly created key and set the value from 0 to 1.

13. Click OK.

14. Right-click on the Real-Time Protection (folder) key, select New, and click on DWORD (32-bit) Value.
15. Name the key DisableOnAccessProtection and press Enter.
16. Double-click the newly created key and set the value from 0 to 1.

17. Click OK.

18. Right-click on the Real-Time Protection (folder) key, select New, and click on DWORD (32-bit) Value.
19. Name the key DisableScanOnRealtimeEnable and press Enter.
20. Double-click the newly created key and set the value from 0 to 1.

21. Click OK.

After completing the steps, simply restart your computer to disable the Windows Defender Antivirus permanently.

If you change your mind, you can always revert the changes using the same instructions, but on step No. 3, right-click the DisableAntiSpyware key, and select Delete. Then inside the Windows Defender (folder) key, right-click the Real-Time Protection (folder) key and select Delete to remove key and its content. Finally, restart your device to complete reverting the changes.

How to disable Windows Defender Antivirus using Security Center

Alternatively, if you're installing a piece of software that requires deactivating the antivirus to install correctly, or you simply want to disable the Windows 10 built-in antivirus temporarily, you can use the following steps:

1. Open Windows Defender Security Center.
2. Click on Virus & threat protection.

3. Click the Virus & threat protection settings option.

4. Turn off the Real-time protection toggle switch.

After completing the steps, Windows Defender Antivirus will be disabled making it unable to monitor and stop malware from taking over your device. However, this is a temporary solution, eventually, the antivirus will re-activate automatically after you restart your device.

Wrapping things up

While there could be scenarios where you may need to disable the antivirus, it's never recommended to have your device without malware protection.

If you're trying to get rid of Windows Defender Antivirus because you prefer another security software, you should know that the built-in antivirus will disable itself automatically during the installation of third-party security software.

It's should also be noted that the shield icon will continue to appear in the notification area of the Taskbar because it's the Windows Defender Security Center icon, not merely dedicated to the antivirus.

In the case you don't like the default anti-malware solution, here are a few alternatives that won't cost you a penny for basic protection