Has anyone found a way to disable Windows Defender in Windows 11 ?


user655362020

Well-known member
Member
Local time
4:16 AM
Posts
17
Visit site
OS
Windows 11
What I have tried :

Tamper protection was disabled when I tried below mentioned things :

1. Suspend MsMpEng.exe from Resource Monitor and enable Turn off Microsoft Defender Antivirus Group policy. The policy reverts itself after reboot.
2. Use WinAero Tweaker.
3. Defender Control

The Antimalware Service Executable is still running.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    Intel Pentium G4560
    Motherboard
    GA-H110M-S2 (rev 1.x)
    Memory
    8 GB Vengeance LPX DDR4 PC4-19200 2400MHz
    Graphics Card(s)
    Nvidia GT 730 2GB GDDR5
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    LG 20MP48AB (19 Inch IPS)
    Screen Resolution
    1440x900
What I have tried :

Tamper protection was disabled when I tried below mentioned things :

1. Suspend MsMpEng.exe from Resource Monitor and enable Turn off Microsoft Defender Antivirus Group policy. The policy reverts itself after reboot.
2. Use WinAero Tweaker.
3. Defender Control

The Antimalware Service Executable is still running.
This is not a recommendation, but in Win 10 you can use install_wim_tweak.exe:
install_wim_tweak.exe /o /c "Windows-Defender" /r

 

My Computer

System One

  • OS
    Microsoft Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    MSI MS-7D98
    CPU
    Intel Core i5-13490F
    Motherboard
    MSI B760 GAMING PLUS WIFI
    Memory
    2 x 16 Patriot Memory (PDP Systems) PSD516G560081
    Graphics Card(s)
    GIGABYTE GeForce RTX 4070 WINDFORCE OC 12G (GV-N4070WF3OC-12GD)
    Sound Card
    Bluetooth Аудио
    Monitor(s) Displays
    INNOCN 15K1F
    Screen Resolution
    1920 x 1080
    Hard Drives
    WD_BLACK SN770 250GB
    KINGSTON SNV2S1000G (ELFK0S.6)
    PSU
    Thermaltake Toughpower GF3 1000W
    Case
    CG560 - DeepCool
    Cooling
    ID-COOLING SE-224-XTS / 2 x 140Mm Fan - rear and top; 3 x 120Mm - front
    Keyboard
    Corsair K70 RGB TKL
    Mouse
    Corsair KATAR PRO XT
    Internet Speed
    100 Mbps
    Browser
    Firefox
    Antivirus
    Microsoft Defender Antivirus
    Other Info
    https://www.userbenchmark.com/UserRun/66553205
This is not a recommendation, but in Win 10 you can use install_wim_tweak.exe:
install_wim_tweak.exe /o /c "Windows-Defender" /r

Any way to disable it without removing it ? I don't want break windows install/cause issues with windows update.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    Intel Pentium G4560
    Motherboard
    GA-H110M-S2 (rev 1.x)
    Memory
    8 GB Vengeance LPX DDR4 PC4-19200 2400MHz
    Graphics Card(s)
    Nvidia GT 730 2GB GDDR5
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    LG 20MP48AB (19 Inch IPS)
    Screen Resolution
    1440x900
Any way to disable it without removing it ? I don't want break windows install/cause issues with windows update.
Wait for the final release. There will be more information.
 

My Computer

System One

  • OS
    Microsoft Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    MSI MS-7D98
    CPU
    Intel Core i5-13490F
    Motherboard
    MSI B760 GAMING PLUS WIFI
    Memory
    2 x 16 Patriot Memory (PDP Systems) PSD516G560081
    Graphics Card(s)
    GIGABYTE GeForce RTX 4070 WINDFORCE OC 12G (GV-N4070WF3OC-12GD)
    Sound Card
    Bluetooth Аудио
    Monitor(s) Displays
    INNOCN 15K1F
    Screen Resolution
    1920 x 1080
    Hard Drives
    WD_BLACK SN770 250GB
    KINGSTON SNV2S1000G (ELFK0S.6)
    PSU
    Thermaltake Toughpower GF3 1000W
    Case
    CG560 - DeepCool
    Cooling
    ID-COOLING SE-224-XTS / 2 x 140Mm Fan - rear and top; 3 x 120Mm - front
    Keyboard
    Corsair K70 RGB TKL
    Mouse
    Corsair KATAR PRO XT
    Internet Speed
    100 Mbps
    Browser
    Firefox
    Antivirus
    Microsoft Defender Antivirus
    Other Info
    https://www.userbenchmark.com/UserRun/66553205

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    Intel Pentium G4560
    Motherboard
    GA-H110M-S2 (rev 1.x)
    Memory
    8 GB Vengeance LPX DDR4 PC4-19200 2400MHz
    Graphics Card(s)
    Nvidia GT 730 2GB GDDR5
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    LG 20MP48AB (19 Inch IPS)
    Screen Resolution
    1440x900
Remembered there is a program Defender Control v1.9
_Defender Control v1.9

"Defender Control is a portable tool featured within a simplistic UI that permits you to one-click disable/enable or even launch Windows Defender.

The need to disable Windows Defender can help speed up the overall time when you find yourself copying large amounts of data to and from your PC or USB or having a conflict between Windows Defender and another type of antivirus solution. It can also benefit users with a machine that is a little light on resources or have a top-notch alternative installed."

I did not use it. Windows 10, of course.
 

My Computer

System One

  • OS
    Microsoft Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    MSI MS-7D98
    CPU
    Intel Core i5-13490F
    Motherboard
    MSI B760 GAMING PLUS WIFI
    Memory
    2 x 16 Patriot Memory (PDP Systems) PSD516G560081
    Graphics Card(s)
    GIGABYTE GeForce RTX 4070 WINDFORCE OC 12G (GV-N4070WF3OC-12GD)
    Sound Card
    Bluetooth Аудио
    Monitor(s) Displays
    INNOCN 15K1F
    Screen Resolution
    1920 x 1080
    Hard Drives
    WD_BLACK SN770 250GB
    KINGSTON SNV2S1000G (ELFK0S.6)
    PSU
    Thermaltake Toughpower GF3 1000W
    Case
    CG560 - DeepCool
    Cooling
    ID-COOLING SE-224-XTS / 2 x 140Mm Fan - rear and top; 3 x 120Mm - front
    Keyboard
    Corsair K70 RGB TKL
    Mouse
    Corsair KATAR PRO XT
    Internet Speed
    100 Mbps
    Browser
    Firefox
    Antivirus
    Microsoft Defender Antivirus
    Other Info
    https://www.userbenchmark.com/UserRun/66553205
Remembered there is a program Defender Control v1.9
_Defender Control v1.9

"Defender Control is a portable tool featured within a simplistic UI that permits you to one-click disable/enable or even launch Windows Defender.

The need to disable Windows Defender can help speed up the overall time when you find yourself copying large amounts of data to and from your PC or USB or having a conflict between Windows Defender and another type of antivirus solution. It can also benefit users with a machine that is a little light on resources or have a top-notch alternative installed."

I did not use it. Windows 10, of course.
I already tried Defender Control
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    Intel Pentium G4560
    Motherboard
    GA-H110M-S2 (rev 1.x)
    Memory
    8 GB Vengeance LPX DDR4 PC4-19200 2400MHz
    Graphics Card(s)
    Nvidia GT 730 2GB GDDR5
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    LG 20MP48AB (19 Inch IPS)
    Screen Resolution
    1440x900
Remembered there is a program Defender Control v1.9
_Defender Control v1.9

v1.9 does Not fully work on Win11 like it did on Win10, because after a short period it turns itself back on.

I'm sure they will fix that in the next build though
 

My Computer

System One

  • OS
    Vista/Win7/Win8/Win10/Win11 (x86/x64)
    Computer type
    PC/Desktop
    Manufacturer/Model
    ..all towers built from scratch
    CPU
    i7's
    Other Info
    ..including W98SE/WXP
    No VM's ..all OS's are live
v1.9 does Not fully work on Win11 like it did on Win10, because after a short period it turns itself back on.

I'm sure they will fix that in the next build though
I think windows security now checks if an antivirus program is running and if not then turns defender back on.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    Intel Pentium G4560
    Motherboard
    GA-H110M-S2 (rev 1.x)
    Memory
    8 GB Vengeance LPX DDR4 PC4-19200 2400MHz
    Graphics Card(s)
    Nvidia GT 730 2GB GDDR5
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    LG 20MP48AB (19 Inch IPS)
    Screen Resolution
    1440x900
Has already 'Administrative Templates (.admx) for Windows 11' ?
 

My Computer

System One

  • OS
    Microsoft Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    MSI MS-7D98
    CPU
    Intel Core i5-13490F
    Motherboard
    MSI B760 GAMING PLUS WIFI
    Memory
    2 x 16 Patriot Memory (PDP Systems) PSD516G560081
    Graphics Card(s)
    GIGABYTE GeForce RTX 4070 WINDFORCE OC 12G (GV-N4070WF3OC-12GD)
    Sound Card
    Bluetooth Аудио
    Monitor(s) Displays
    INNOCN 15K1F
    Screen Resolution
    1920 x 1080
    Hard Drives
    WD_BLACK SN770 250GB
    KINGSTON SNV2S1000G (ELFK0S.6)
    PSU
    Thermaltake Toughpower GF3 1000W
    Case
    CG560 - DeepCool
    Cooling
    ID-COOLING SE-224-XTS / 2 x 140Mm Fan - rear and top; 3 x 120Mm - front
    Keyboard
    Corsair K70 RGB TKL
    Mouse
    Corsair KATAR PRO XT
    Internet Speed
    100 Mbps
    Browser
    Firefox
    Antivirus
    Microsoft Defender Antivirus
    Other Info
    https://www.userbenchmark.com/UserRun/66553205
Any way to disable it without removing it ? I don't want break windows install/cause issues with windows update.
Install 3rd party AV, disable Defender's services, uninstall 3rd party AV.
 

Attachments

  • capture_07032021_134815.jpg
    capture_07032021_134815.jpg
    162.4 KB · Views: 24

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 8600G (07/24)
    Motherboard
    ASROCK B650M-HDV/M.2 3.09 (07/24)
    Memory
    2x32GB Kingston FURY DDR5 5600 MHz CL36 @4800 CL40 (07/24)
    Graphics Card(s)
    ASROCK Radeon RX 6600 Challenger D 8G @60FPS (08/24)
    Sound Card
    Creative Sound BlasterX AE-5 Plus (05/24)
    Monitor(s) Displays
    24" Philips 24M1N3200ZS/00 (05/24)
    Screen Resolution
    1920×1080@165Hz via DP1.4
    Hard Drives
    Kingston KC3000 NVMe 2TB (05/24)
    ADATA XPG GAMMIX S11 Pro 512GB (07/19)
    PSU
    Seasonic Core GM 550 Gold (04/24)
    Case
    Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
    Cooling
    Noctua NH-U12S with Noctua NF-P12 (04/24)
    Keyboard
    HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
    Mouse
    Logitech M330 Silent Plus (04/23)
    Internet Speed
    500/100 Mbps via RouterOS (05/21) & TCP Optimizer
    Browser
    Edge & Brave for YouTube & LibreWolf for FB
    Antivirus
    NextDNS
    Other Info
    Backup: Hasleo Backup Suite (PreOS)
    Headphones: Sennheiser RS170 (09/10)
    Phone: Samsung Galaxy Xcover 7 (02/24)
    Chair: Huzaro Force 4.4 Grey Mesh (05/24)
    Notifier: Xiaomi Mi Band 9 Milanese (10/24)
    2nd Monitor: AOC G2460VQ6 @75Hz (02/19)
I think windows security now checks if an antivirus program is running and if not then turns defender back on.
There are a number of things at play, you can read about it here and there with ways around it.
I've only briefly tested them, but I'm not in a hurry either way to solve it since 11 is just in beta
 

My Computer

System One

  • OS
    Vista/Win7/Win8/Win10/Win11 (x86/x64)
    Computer type
    PC/Desktop
    Manufacturer/Model
    ..all towers built from scratch
    CPU
    i7's
    Other Info
    ..including W98SE/WXP
    No VM's ..all OS's are live
Install 3rd party AV, disable Defender's services, uninstall 3rd party AV.


TairikuOkami, is this your place on your sig?


Is that what you use = your Microsoft Defender Disable.bat?

Since it was last updated a few months ago, I thought it was not tested on Win11 yet?
 

My Computer

System One

  • OS
    Vista/Win7/Win8/Win10/Win11 (x86/x64)
    Computer type
    PC/Desktop
    Manufacturer/Model
    ..all towers built from scratch
    CPU
    i7's
    Other Info
    ..including W98SE/WXP
    No VM's ..all OS's are live
Is that what you use = your Microsoft Defender Disable.bat?

Since it was last updated a few months ago, I thought it was not tested on Win11 yet?
Yes. 11 has not changed anything in terms of Defender.
 

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 8600G (07/24)
    Motherboard
    ASROCK B650M-HDV/M.2 3.09 (07/24)
    Memory
    2x32GB Kingston FURY DDR5 5600 MHz CL36 @4800 CL40 (07/24)
    Graphics Card(s)
    ASROCK Radeon RX 6600 Challenger D 8G @60FPS (08/24)
    Sound Card
    Creative Sound BlasterX AE-5 Plus (05/24)
    Monitor(s) Displays
    24" Philips 24M1N3200ZS/00 (05/24)
    Screen Resolution
    1920×1080@165Hz via DP1.4
    Hard Drives
    Kingston KC3000 NVMe 2TB (05/24)
    ADATA XPG GAMMIX S11 Pro 512GB (07/19)
    PSU
    Seasonic Core GM 550 Gold (04/24)
    Case
    Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
    Cooling
    Noctua NH-U12S with Noctua NF-P12 (04/24)
    Keyboard
    HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
    Mouse
    Logitech M330 Silent Plus (04/23)
    Internet Speed
    500/100 Mbps via RouterOS (05/21) & TCP Optimizer
    Browser
    Edge & Brave for YouTube & LibreWolf for FB
    Antivirus
    NextDNS
    Other Info
    Backup: Hasleo Backup Suite (PreOS)
    Headphones: Sennheiser RS170 (09/10)
    Phone: Samsung Galaxy Xcover 7 (02/24)
    Chair: Huzaro Force 4.4 Grey Mesh (05/24)
    Notifier: Xiaomi Mi Band 9 Milanese (10/24)
    2nd Monitor: AOC G2460VQ6 @75Hz (02/19)
Yes. 11 has not changed anything in terms of Defender.
Actually yes it has changed, there are/is at least one new variable that turn it back on as compared to what they did in Win10, but perhaps your way with your Microsoft Defender Disable.bat takes care of it no matter what, as compared to Defender Control that was mentioned previously in this thread.
I will give your bat a try then and test it for gp (general purposes) since I've got Win11 all setup on the tower next to me.

btw, your place there at GitHub:

...nice work! I see you just updated the Windows Tweaks.bat a few minutes ago, might even give that a go..
 

My Computer

System One

  • OS
    Vista/Win7/Win8/Win10/Win11 (x86/x64)
    Computer type
    PC/Desktop
    Manufacturer/Model
    ..all towers built from scratch
    CPU
    i7's
    Other Info
    ..including W98SE/WXP
    No VM's ..all OS's are live
I'll give it a try too
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    Intel Pentium G4560
    Motherboard
    GA-H110M-S2 (rev 1.x)
    Memory
    8 GB Vengeance LPX DDR4 PC4-19200 2400MHz
    Graphics Card(s)
    Nvidia GT 730 2GB GDDR5
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    LG 20MP48AB (19 Inch IPS)
    Screen Resolution
    1440x900
I'll give it a try too

Well a few things I've found already, and now I see TairikuOkami warns us about it in his
Microsoft Defender Disable.bat
..where he says:
rem You need to run twice or restart and run the .bat again to disable services (MsMpEng.exe) !!!!!
rem If it does not work, install 3rd party AV temporarily, then run .bat and uninstall 3rd party AV.

..and now I see that's very important, because after first running the Microsoft Defender Disable.bat, within 15 minutes I got a prompt from Defender even though it was off, and it said:
I circled in red one of the things it did

prompt.jpg

..and then tracking the reg/file changes with my software I noticed Defender Did Remove these 2 keys that the ..bat added when I first ran it, I saw they were added, I saw it:


removes.jpg


..but then Defender removes them
So, again, as TairikuOkami says in his ...bat
rem You need to run twice or restart and run the .bat again to disable services (MsMpEng.exe) !!!!!
rem If it does not work, install 3rd party AV temporarily, then run .bat and uninstall 3rd party AV.

I do believe him

I'm out of time for today to play, but it was fun :)

Now on Win10 of course I do have an alternative AV installed, but just didn't have time to do that yet with Win11, and will do on another day of play.. ..okay back to work now!
 

My Computer

System One

  • OS
    Vista/Win7/Win8/Win10/Win11 (x86/x64)
    Computer type
    PC/Desktop
    Manufacturer/Model
    ..all towers built from scratch
    CPU
    i7's
    Other Info
    ..including W98SE/WXP
    No VM's ..all OS's are live
Can it not be disabled through the Group Policy Editor?
 

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 24H2 v26100.2033
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built Myself in 2017
    CPU
    AMD Ryzen 1800X 8-Core @ 3.60GHz
    Motherboard
    Asus Crosshair VI Hero
    Memory
    16GB G.Skill Trident Z RGB Series
    Graphics Card(s)
    AMD Radeon RX 580 8GB GDDR5
    Sound Card
    On Board
    Monitor(s) Displays
    2 X AOC 27" , PLANAR 22"
    Screen Resolution
    1920 X 1080
    Hard Drives
    ~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~ P34A60 512GB NVMe PCIe Gen3x4 M.2
    ~ 6TB Toshiba HDD
    ~ 6TB HDD (Backup)
    ~ SanDisk 250GB SSD
    ~ 2 X 1TB HDD
    ~~~~~~~~~~
    PSU
    Corsair RM850 Fully Modular (850watts)
    Case
    NZXT Phantom 630 CA-PH630-W1
    Cooling
    CORSAIR iCUE H100i RGB PRO XT
    Keyboard
    Nulea RT05 Wireless Ergonomic
    Mouse
    Nulea M510 Wireless Vertical Mouse
    Internet Speed
    761Mbps (Download) / 692Mbps (Upload)
    Browser
    Firefox
    Antivirus
    Malwarebytes
    Other Info
    *This is my Main Computer That I use*
  • Operating System
    Windows 11 Pro x64
    Computer type
    Laptop
    Manufacturer/Model
    HP
    Memory
    8GB
    Screen Resolution
    1920 X 1080
    Hard Drives
    250GB SSD
    Internet Speed
    752Mbps (Download) / 537Mbps (Upload)
    Browser
    Firefox
    Antivirus
    Malwarebytes
Look at the reg, it was already!
 

My Computer

System One

  • OS
    Vista/Win7/Win8/Win10/Win11 (x86/x64)
    Computer type
    PC/Desktop
    Manufacturer/Model
    ..all towers built from scratch
    CPU
    i7's
    Other Info
    ..including W98SE/WXP
    No VM's ..all OS's are live
Can it not be disabled through the Group Policy Editor?
AV is pretty much a requirement in 11, just like TPM. If you disable 3rd part AV temporarily, Defender kicks in (when not disabled).
 

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 8600G (07/24)
    Motherboard
    ASROCK B650M-HDV/M.2 3.09 (07/24)
    Memory
    2x32GB Kingston FURY DDR5 5600 MHz CL36 @4800 CL40 (07/24)
    Graphics Card(s)
    ASROCK Radeon RX 6600 Challenger D 8G @60FPS (08/24)
    Sound Card
    Creative Sound BlasterX AE-5 Plus (05/24)
    Monitor(s) Displays
    24" Philips 24M1N3200ZS/00 (05/24)
    Screen Resolution
    1920×1080@165Hz via DP1.4
    Hard Drives
    Kingston KC3000 NVMe 2TB (05/24)
    ADATA XPG GAMMIX S11 Pro 512GB (07/19)
    PSU
    Seasonic Core GM 550 Gold (04/24)
    Case
    Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
    Cooling
    Noctua NH-U12S with Noctua NF-P12 (04/24)
    Keyboard
    HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
    Mouse
    Logitech M330 Silent Plus (04/23)
    Internet Speed
    500/100 Mbps via RouterOS (05/21) & TCP Optimizer
    Browser
    Edge & Brave for YouTube & LibreWolf for FB
    Antivirus
    NextDNS
    Other Info
    Backup: Hasleo Backup Suite (PreOS)
    Headphones: Sennheiser RS170 (09/10)
    Phone: Samsung Galaxy Xcover 7 (02/24)
    Chair: Huzaro Force 4.4 Grey Mesh (05/24)
    Notifier: Xiaomi Mi Band 9 Milanese (10/24)
    2nd Monitor: AOC G2460VQ6 @75Hz (02/19)

Latest Support Threads

Back
Top Bottom