I Disabled Real Time Protection but Windows Defender Is still Running

edoWin11Forums · Jan 15, 2023

Hi, I disabled Real Time protection to install a "broken" Software. However even though Defender's Real Time Protection is off, I still get items being quarantined during installation. How can I actually disable Defender temporarily?

James · Jan 16, 2023

Hi there. Open powershell. Enter the following: Set-MpPreference -DisableRealtimeMonitoring $true. When finished, simply enter: Set-MpPreference -DisableRealtimeMonitoring $false

Wisewiz · Jan 16, 2023

edoWin11Forums said:
Hi, I disabled Real Time protection to install a "broken" Software. However even though Defender's Real Time Protection is off, I still get items being quarantined during installation. How can I actually disable Defender temporarily?

I haven't tried James's method, but my guess is that it won't work unless you turn off Tamper Protection first.

I'd suggest that you first try going into your Defender screen (Virus and threat protection) and disabling Tamper Protection, and then turning off real-time protection. If you don't turn off TP first, turning off real-time protection will be ineffective.

But if you go this route, be SURE to go back and change those settings when you're finished.

@James : Does the Power Shell method work with Tamper Protection ON?

James · Jan 16, 2023

You can also turn off internet if the program doesn’t rely on such. I haven’t tried the power shell method with fiddling with settings to turn off anything, so I’m assuming it works without Tamper Protection

imanlien2020 · Jan 16, 2023

edoWin11Forums said:
Hi, I disabled Real Time protection to install a "broken" Software. However even though Defender's Real Time Protection is off, I still get items being quarantined during installation. How can I actually disable Defender temporarily?

If you mean Modded Software, hey its a free world. I get the same issue. I have every setting and registry tweak done to rid defenders powerful grip. I use Avast Premiere Pro and it takes over defender for sure BUT, I say but because and I have had legit Owned software/files quarantined by some very deeply embedded part of Defender. Nothing shuts this off for me. I may try James tweak here and see what happens.

kelper · Jan 17, 2023

Not working for me...

PS C:\WINDOWS\system32> Set-MpPreference -DisableRealtimeMonitoring $true
Set-MpPreference : Operation failed with the following error: 0x800106ba. Operation: Set-MpPreference. Target:
DisableRealtimeMonitoring.
At line:1 char:1
+ Set-MpPreference -DisableRealtimeMonitoring $true
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Set-MpPreference],
CimException
+ FullyQualifiedErrorId : HRESULT 0x800106ba,Set-MpPreference

James · Jan 17, 2023

kelper said:
Not working for me...

PS C:\WINDOWS\system32> Set-MpPreference -DisableRealtimeMonitoring $true
Set-MpPreference : Operation failed with the following error: 0x800106ba. Operation: Set-MpPreference. Target:
DisableRealtimeMonitoring.
At line:1 char:1
+ Set-MpPreference -DisableRealtimeMonitoring $true
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Set-MpPreference],
CimException
+ FullyQualifiedErrorId : HRESULT 0x800106ba,Set-MpPreference

Must need to turn of Tamperprotectoon

kelper · Jan 17, 2023

Even as admin, I can't turn off Tamper Protection on Win 11 Pro. Need an IT Admin!

And I'm not allowed to edit the DWord here for TP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features

TairikuOkami · Jan 17, 2023

Note that it might be also blocked by smartscreen or by exploit protection, they work separately from Defender.

https://www.addictivetips.com/windows-tips/whitelist-apps-in-the-smartscreen-on-windows-10

https://www.addictivetips.com/windows-tips/exclude-an-app-from-exploit-protection-on-windows-10

Wisewiz · Jan 17, 2023

kelper said:
Even as admin, I can't turn off Tamper Protection on Win 11 Pro. Need an IT Admin!

Strange. Do you have another Anti-V program running alongside Defender?
I only ask that because I use both Malwarebytes and Defender, and although I can't recall ever trying to turn off TP before I installed MWB, it's certainly the case that currently I can turn off TP at will, with just my normal Administrator login.

kelper said:
And I'm not allowed to edit the DWord here for TP

You'll have to edit your permissions for that key. I'm sure @Brink has help for that here, if you need it.

Brink · Jan 17, 2023

Hello,

I'm afraid Tamper Protection can only be turned off via Windows Security below for security reasons. It will not allow any other method.

Turn On or Off Tamper Protection for Microsoft Defender Antivirus in Windows 11 Tutorial

Microsoft Defender Antivirus is an antivirus software that is included in Windows 11 and can help protect your device from viruses, malware, and other threats. Tamper Protection in Windows Security helps prevent malicious apps from changing important Microsoft Defender Antivirus settings...

www.elevenforum.com

kelper · Jan 17, 2023

Wisewiz said:
Strange. Do you have another Anti-V program running alongside Defender?
I only ask that because I use both Malwarebytes and Defender, and although I can't recall ever trying to turn off TP before I installed MWB, it's certainly the case that currently I can turn off TP at will, with just my normal Administrator login.

Thanks. I use Webroot and Defender occasional scanning was off. When I turned it on, I was able to turn off Tamper Protection. But I did turn it back on. Anyway, it's all good to know.

Wisewiz · Jan 17, 2023

Great news!

I Disabled Real Time Protection but Windows Defender Is still Running

Member

My Computer

Professional

My Computers

Speaks Ancient Geek

My Computers

Professional

My Computers

EternalSoul

My Computer

Well-known member

My Computer

Professional

My Computers

Well-known member

My Computer

Brony

My Computer

Speaks Ancient Geek

My Computers

Administrator

My Computers

Well-known member

My Computer

Speaks Ancient Geek

My Computers

Similar threads