Microsoft Defender is the built-in antivirus and security suite included with Windows 11. It provides real-time protection against viruses, malware, ransomware, phishing attacks, and other threats without requiring third-party software. For most users, keeping Microsoft Defender enabled is highly recommended because it helps secure your PC automatically.
However, some advanced users may want to permanently disable Microsoft Defender for specific reasons. This may include installing another antivirus program, reducing background processes for testing, using specialized software that conflicts with Defender, or managing enterprise-level security differently.
Before proceeding, it is important to understand that disabling Microsoft Defender permanently can expose your computer to security risks. Without proper protection, your system becomes more vulnerable to malicious software, spyware, ransomware, and unauthorized access. If you disable Defender, it is strongly advised to install reliable third-party security software immediately.
This guide explains multiple methods to permanently disable Microsoft Defender on Windows 11, including Group Policy Editor, Registry Editor, and advanced security settings. The instructions are detailed and designed for users who want a long-term solution rather than temporary disabling.
Important Warning Before You Disable Microsoft Defender
Permanently turning off Microsoft Defender can:
- Increase security risks
- Leave your PC unprotected
- Make your system vulnerable to malware
- Disable ransomware protection
- Reduce browser security features
- Affect Windows Security notifications
If you only want to disable Defender temporarily, Windows Security settings may be enough. Permanent disabling should only be done if you fully understand the consequences.
Method 1: Disable Tamper Protection First
Tamper Protection prevents unauthorized changes to Microsoft Defender settings. Before making permanent changes, you must turn this off.
Steps:
- Press Windows + I to open Settings
- Click Privacy & Security
- Select Windows Security
- Click Open Windows Security
- Choose Virus & Threat Protection
- Scroll down and click Manage Settings
- Find Tamper Protection
- Toggle it Off
You may need administrator permission to complete this step.
Once Tamper Protection is disabled, you can proceed with deeper system modifications.
Method 2: Permanently Disable Microsoft Defender Using Group Policy Editor
This method works best on Windows 11 Pro, Enterprise, and Education editions. Windows 11 Home does not include Group Policy Editor by default.
Open Group Policy Editor:
- Press Windows + R
- Type gpedit.msc
- Press Enter
Navigate to:
Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus
Disable Defender:
- Double-click Turn off Microsoft Defender Antivirus
- Select Enabled
- Click Apply
- Click OK
Disable Real-Time Protection:
Navigate to:
Microsoft Defender Antivirus > Real-Time Protection
Then disable the following:
- Turn off real-time protection
- Turn off behavior monitoring
- Turn off on-access protection
- Turn off scan on downloaded files
Set each option to Enabled to disable the security feature.
Restart Your Computer
After rebooting, Microsoft Defender should be permanently disabled.
Method 3: Permanently Disable Microsoft Defender Using Registry Editor
This method works on all versions of Windows 11, including Home edition.
Warning:
Incorrect registry changes can damage your system. Always back up your registry first.
Steps:
- Press Windows + R
- Type regedit
- Press Enter
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
Create New DWORD:
- Right-click empty space
- Select New > DWORD (32-bit) Value
- Name it:
DisableAntiSpyware
Set Value:
- Double-click the new key
- Set value to 1
- Click OK
Disable Real-Time Protection:
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection
Create these DWORD values and set each to 1:
- DisableBehaviorMonitoring
- DisableOnAccessProtection
- DisableScanOnRealtimeEnable
Restart Your PC
After restart, Defender should remain disabled.
Method 4: Disable Microsoft Defender Through Autoruns Tool
Advanced users can disable Defender startup components.
Steps:
- Download Autoruns from Microsoft Sysinternals
- Run as administrator
- Search for Defender-related services
- Uncheck:
- Windows Defender
- SecurityHealth
- MsMpEng
Restart PC
This prevents Defender services from launching automatically.
Method 5: Disable Defender Services via Safe Mode
Because Defender services are protected, Safe Mode may allow additional service disabling.
Steps:
- Boot into Safe Mode
- Open Registry Editor
- Navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Modify Services:
Look for:
- WinDefend
- SecurityHealthService
- Sense
Set their Start value to:
4 (Disabled)
Restart Normally
This can disable Defender service loading.
Method 6: Install Third-Party Antivirus
Windows often disables Microsoft Defender automatically when another antivirus program is installed.
Popular alternatives include:
- Bitdefender
- Norton
- Kaspersky
- Avast
- Malwarebytes
This is the safest long-term method because your system remains protected.
How To Confirm Microsoft Defender Is Disabled
After completing any method:
- Open Windows Security
- Check Virus & Threat Protection
- If Defender is disabled, you may see:
- “No active antivirus provider”
- Or third-party antivirus listed
Task Manager Check:
- Press Ctrl + Shift + Esc
- Look for:
- MsMpEng.exe
- Antimalware Service Executable
If absent, Defender is likely disabled.
Common Problems and Fixes
Defender Re-Enables After Restart
This often happens because:
- Tamper Protection is still enabled
- Windows updates restore settings
- Registry keys are overwritten
Fix:
- Disable Tamper Protection
- Use Group Policy plus Registry together
- Pause Windows Updates if necessary
Missing Group Policy Editor
Windows 11 Home users may need:
- Registry method
- Third-party policy tools
Risks of Permanently Disabling Microsoft Defender
Without Defender:
- Malware infections become more likely
- Phishing protection decreases
- Ransomware defense weakens
- System vulnerability increases
- Browser security may decline
For most users, disabling Defender is not recommended unless another robust antivirus solution replaces it.
How To Re-Enable Microsoft Defender
If you change your mind:
Group Policy:
- Open gpedit.msc
- Set Turn off Microsoft Defender Antivirus to Not Configured
Registry:
- Delete DisableAntiSpyware
- Change related values back to 0
Services:
- Restore service Start values to default
Re-enable Tamper Protection
- Open Windows Security
- Turn Tamper Protection back on
Restart your computer afterward.
Final Thoughts
Permanently disabling Microsoft Defender on Windows 11 requires advanced system modifications beyond standard settings. While it can be done through Group Policy, Registry Editor, Safe Mode, or third-party tools, doing so carries significant security implications.
For most users, Microsoft Defender offers reliable built-in security with minimal system impact. If you choose to disable it, ensure that another trusted antivirus solution is active to maintain system protection.
The safest permanent solution is usually installing a reputable third-party antivirus rather than leaving your PC unprotected. Carefully weigh the risks before making permanent changes to your Windows security setup.
