Using RegEdit to disable Windows Defender in Windows 11


elbmek

Well-known member
Member
VIP
Local time
6:45 AM
Posts
574
Location
Sutton Coldfield England
Visit site
OS
Win 11 x 64 Home on PC . Pro Win 10 x 64 on Surface 5.
Thnk you Gemini, great post mate
 

My Computer

System One

  • OS
    Win 11 x 64 Home on PC . Pro Win 10 x 64 on Surface 5.
    Computer type
    PC/Desktop
    Manufacturer/Model
    PC Specialist
    CPU
    amd ryzen 9 5900X 12 core 3701mhz 24 logistical process
    Motherboard
    Gigabyte B550 Auros Elite V2
    Memory
    16GB (2x8) Corsair VENGEANCE DDR4 3200MHz
    Graphics Card(s)
    Aoris Nvidia Geforce RTX 3060 ti
    Sound Card
    ONBOARD 6 CHANNEL (5.1) HIGH DEF AUDIO (AS STANDARD)
    Monitor(s) Displays
    Samsung F27G3T 144hz
    Screen Resolution
    1920 x 1080
    Hard Drives
    Samsung V-NAND SSD 970 Evo plus 500GB
    3TB SATA-III 3.5" HDD, 6GB/s, 7200RPM, 64MB CACHE
    1 x 4TB External USB. 1 x 5TB External SSD
    PSU
    Corsair VS550
    Case
    Coolermaster
    Cooling
    DEEP COOL AS500 CPU COOLER
    Keyboard
    Microsoft Multimedia 1.01a. MSI Vigor elite Mech board as spare/games
    Mouse
    Corsair Sabre (with pretty lights!)
    Internet Speed
    600+MB
    Browser
    Opera, Chrome, FF
    Antivirus
    Kaspersky PLus
    Other Info
    WIRELESS 802.11 AC1300 867Mbps/5GHz, 400Mbps/2.4GHz PCI-E CARD
    Logitech speakers
    Asus DRW-14D5MT x48
    Net via Virgin hub 3 (using RJ45 cable). Plus MS surface 5 tablet

GenuineGemini

Member
Local time
1:45 AM
Posts
8
Visit site
OS
Windows 11 Pro, 21H2, 22000.675
Hey Folks. I just wanted to post an update on the results of my endeavor to fully eliminate Windows Defender FW in Win 11.

So, I tried the Toggle Defender batch file mentioned on page one by Spartan and it seemed to resolve the active/inactive conflict that I was experiencing in Windows Security under Providers as Windows FW now shows off instead of on. However, it did not disable the Windows Defender FW protected service in services, which is always running. I also applied the registry tweaks outlined by the OP, Alan Jr as running the Toggle Defender batch file did not set any of those registry keys to 4 for off/disabed, but they did not disable the protected service in services either after a reboot.

I managed to come across a piece of info that did work though and all it involved was going to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc
and setting the DWORD start to 4 and then rebooting. Safe mode not required.

After the reboot, which went fine, the Windows Defender FW protected service now shows disabled and my PC was able to reach a CPU idle state even faster than before after the restart.

For anyone looking to use a 3rd party FW/AV program instead of Windows Defender AV/FW, I would recommend performing all three of Toggle Defender batch file, editing the OP recommended reg keys by setting the start to 4 and editing the mpssvc reg key start to 4. This appears to be the most effective and complete means of rendering Windows Defender FW moot in Win 11.

Additionally, I would like to mention that Windows Update seems to work fine, but I did decide to set the Windows Update service, wuauserv, to Auto (Delayed Start) just to be safe.

As it stands right now, with 4 browser pages open, along with task manager and services open, my CPU usage is sitting between 1 and 4 percent while my disk usage is at 0 percent and my memory usage is at 12% with all my startups including MWB Premium and Comodo FW running.

I hope others find this info useful in the future.
 

My Computer

System One

  • OS
    Windows 11 Pro, 21H2, 22000.675
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom AMD
    CPU
    AMD FX-8350 Eight-Core Processor 4.01GHz
    Motherboard
    ASUS Sabertooth 990FX R2.0
    Memory
    G Skill Ripjaw 32GB
    Graphics Card(s)
    Sapphire NITRO+ RX 480 OC 8 GB Radeon
    Sound Card
    ASUS Xonar THX/Dolby Certified
    Monitor(s) Displays
    65" Vizio 4K
    Screen Resolution
    4K
    Hard Drives
    Samsung 850 EVO 500GB SSD x2
    PSU
    Corsair RM-1000 watt 80 PLUS® Gold Certified Fully Modular
    Case
    Corsair Obsidian Series 450D
    Cooling
    Arctic Liquid Freezer 360
    Keyboard
    Logitech MX Keys
    Mouse
    Logitech MX Master
    Internet Speed
    400MBps
    Browser
    Comodo Dragon
    Antivirus
    MalwareBytes Premium
    Other Info
    Logitech Z906 500W 5.1 THX/Dolby Certified Surround Sound Speaker System

Wynona

Well-known member
Power User
VIP
Local time
12:45 AM
Posts
1,862
Location
Arkansas
Visit site
OS
Windows 11 22621.819
Using RegEdit to disable Windows Defender in Windows 11
An alternative way to disable Windows Defender in Windows 10 or 11 is to use the registry. For this, you will also need to boot into safe mode. Follow step 1 from the previous chapter to boot into safe mode.

Once booted in Safe Mode: (Win key + R,,select Boot tab and then select safe boot)

  1. Press Windows key + R
  2. Type regedit <enter> to open the registry
  3. Use the "Find" feature and locate each folder below and click to change "start" from "3" to "4"
    • Sense
    • WdBoot
    • WdFilter
    • WdNisDrv
    • WdNisSvc
    • WinDefend
  4. Exit out of Safe Mode

Revert the change
If you no longer want to disable Windows Defender you can easily revert the change. You will need to restart into safe mode again and give System and Trusted Installer full access permission on the Platform folder.

When you used the registry method, then restore the values to:

HKLM\SYSTEM\CurrentControlSet\Services\Sense\Start 3
HKLM\SYSTEM\CurrentControlSet\Services\WdBoot\Start 0
HKLM\SYSTEM\CurrentControlSet\Services\WdFilter\Start 0
HKLM\SYSTEM\CurrentControlSet\Services\WdNisDrv\Start 3
HKLM\SYSTEM\CurrentControlSet\Services\WdNisSvc\Start 3
HKLM\SYSTEM\CurrentControlSet\Services\WinDefend\Start 2
Why on earth would I want to disable Windows Defender? It's one of the most valuable security measures on my computers.
 

My Computers

System One System Two

  • OS
    Windows 11 22621.819
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Envy TE01-1xxx
    CPU
    Intel(R) Core(TM) i7-10700 CPU @ 2.90GHz 2.90 GHz
    Motherboard
    16.0GB Dual-Channel Unknown @ 1463MHz (21-21-21-47)
    Memory
    16384 MBytes
    Graphics Card(s)
    Intel UHD Graphics 630
    Sound Card
    Realtek High Definition Audio
    Monitor(s) Displays
    Monitor 1 - Acer 27" Monitor 2 - Acer 27"
    Screen Resolution
    1920 x 1080
    Hard Drives
    WDC PC SN530 SDBPNPZ-512G-1006 (SSD)
    Seagate ST1000DM003-1SB102
    Seagate BUP Slim SCSI Disk Device (SSD)
    PSU
    HP
    Case
    HP
    Cooling
    Standard
    Keyboard
    Logitech Wave K350
    Mouse
    Logitech M705
    Internet Speed
    100 mbps
    Browser
    Firefox
    Antivirus
    Windows Defender
    Other Info
    That's all Folks!
  • Operating System
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP
    CPU
    Intel Core i7 (10th gen) 10700
    Motherboard
    Intel
    Memory
    16 GB
    Graphics card(s)
    Intel UHD Graphics 630
    Sound Card
    Built-in
    Monitor(s) Displays
    Acer 27" & Samsung 24"
    Screen Resolution
    1920 x
    Hard Drives
    SSD (512 GB)
    HDD (1 TB)
    Seagate
    PSU
    Intel i7 10th Generation
    Case
    HP
    Cooling
    HP/Intel?
    Mouse
    Logitech M705
    Keyboard
    Logitech Wave K350
    Internet Speed
    50 mbps
    Browser
    Firefox 90.2
    Antivirus
    Windows Defender
    Other Info
    Headphone/Microphone Combo
    SuperSpeed USB Type-A (4 on front)
    HP 3-in-One Card Readr
    SuperSpeed USB Type-C
    DVD Writer

erpster4

Active member
Member
VIP
Local time
10:45 PM
Posts
178
Visit site
OS
windows 10 ltsc
Sordum software also do a freebee called Defender Control along with other useful windows tweakers.

though you will need to add an exception or add the defender control app onto the exclusion list first before windows defender or any other AV app (with their latest definition/detection updates) will detect and delete defender control
 

My Computer

System One

  • OS
    windows 10 ltsc

Necrosaro

Banned
Local time
11:45 PM
Posts
78
Visit site
OS
Windows 11 (NTLITE optimized)
I removed Defender root and stem with NtLite. I have not ran an antivirus program nor had any issues with viruses/malware since the younger times of XP.

I would rather have as much of my processor/ram doing what I want it to do and not what is unnecessary. This goes for all the other windows stuff I don't need.
 

My Computer

System One

  • OS
    Windows 11 (NTLITE optimized)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    Amd 8350 Overclocked to 4.7
    Motherboard
    Asus Sabertooth r2
    Memory
    2400 MHz DDR 3 GSkill
    Graphics Card(s)
    Nvidia 1070
    Sound Card
    Denon receiver 7.1/Atmos
    Monitor(s) Displays
    LG C7
    Screen Resolution
    4k
    Hard Drives
    Samsung SSD 840 512 gig
    Backup drive 18 terabyte hhd
    Cooling
    Hyper 212 Cpu cooler with case fans
    Keyboard
    Simple keyboard
    Mouse
    Simple mouse
    Internet Speed
    1.5 gig Fiber
    Browser
    Edge
    Antivirus
    Never

MadScientist

Active member
Local time
1:45 AM
Posts
30
Visit site
OS
Windows 11 Pro

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    My Build
    CPU
    AMD Ryzen 5 5600X
    Motherboard
    Asrock B550 Phantom Gaming 4
    Memory
    Corsair 32GB Vengeance DDR4 3600Mhz ram
    Graphics Card(s)
    Nvidia GTX Geforce 1660 Ti
    Monitor(s) Displays
    MSI 27" Optix G27C4

Bolt0426

New member
Local time
7:45 AM
Posts
2
Visit site
OS
Windows 11
Why all this hassle??


1) Download ToggleDefender to fully disable Windows Defender and Smart Screen in one click

2) Download and run the Disable Defender.reg and all the services would be disabled

Code:
Windows Registry Editor Version 5.00

;Microsoft Defender Antivirus Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend]
"Start"=dword:00000004

;Microsoft Defender Antivirus Network Inspection Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc]
"Start"=dword:00000004

;Windows Defender Antivirus Network Inspection System Driver
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv]
"Start"=dword:00000004

;Windows Defender Advanced Threat Protection Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense]
"Start"=dword:00000004
thank youuuuuuuuuuuuu
 

My Computer

System One

  • OS
    Windows 11
Top Bottom