How to Turn Off Antivirus Windows 11

TopAntivirusSoftware
7 min readJul 15, 2023

--

Windows 11 comes with a robust and effective antivirus tool known as Windows Defender. While this in-built protective mechanism is excellent for safeguarding your computer from harmful malware and viruses, there are instances when you might need to disable it. This comprehensive guide will walk you through the steps on how to turn off antivirus Windows 11 using different methods.

Understanding Windows Defender

Windows Defender is a free antivirus tool that comes pre-installed in Windows 11. It provides real-time protection against various threats such as malware and viruses. However, in certain scenarios, you might find it necessary to disable it. For instance, it can be resource-intensive, consuming a significant portion of your system’s resources, leading to reduced performance.

Despite turning it off through the usual Virus & threat protection settings, it has a tendency to reactivate automatically after a short period. Therefore, to completely disable it, you need to follow some specific procedures.

Method 1: Deactivating Windows Defender Using Group Policy Settings

One of the ways to disable the antivirus Windows 11 is by utilizing the Group Policy settings. Here is a step-by-step guide on how to do it:

Step 1: Accessing the Settings

Begin by clicking on the Start button and selecting Settings.

Step 2: Navigating to the Windows Defender Settings

Next, click on Privacy & security, followed by Windows Security , then Virus & threat protection.

Step 3: Managing the Settings

Beneath the Virus & threat protection settings, you’ll find the Manage settings option. Click on it.

Step 4: Turning Off Tamper Protection

Scroll down to locate the Tamper Protection option. Toggle this setting to the Off position.

Step 5: Confirming the Changes

A prompt will appear asking, Do you want to allow this app to make changes to your device? Click Yes to confirm.

Step 6: Closing the Window

Once the Tamper Protection has been turned off, a message will appear indicating that your device might be vulnerable. Close this window by clicking on the x at the top right.

Step 7: Launching the Group Policy Editor

Now, from the taskbar, tap on the search icon and type Edit group policy. Click on the result to launch the Group Policy editor.

Step 8: Navigating to the Windows Components

In the editor’s left pane, locate Computer Configuration, select Administrative Templates, followed by Windows Components.

Step 9: Locating Microsoft Defender Antivirus

Scroll down through the options until you find Microsoft Defender Antivirus.

Step 10: Editing the Settings

Look for the setting labeled Turn off Microsoft Defender Antivirus in the right panel. Right-click on it and select Edit.

Step 11: Enabling the Changes

In the popup window that appears, check the Enabled option, followed by Apply, then OK.

Step 12: Further Settings Tweaks

Next, locate the setting named Allow antimalware service to remain running always and right-click it. Press Edit.

Step 13: Disabling the Antimalware Service

In the next window, check the Disabled box, click on Apply, and then OK.

Step 14: Accessing Real-time Protection

Now, locate the folder titled Real-time Protection and double-click to open it.

Step 15: Turning Off Real-time Protection

Right-click on the setting labeled Turn off real-time protection and select Edit.

Step 16: Enabling the Changes

Check the Enabled box, click on Apply, and then OK.

Step 17: Setting Up a Task Scheduler

After configuring the group policy, you need to set up a Task Scheduler to stop specific services from running, which can cause errors once the Defender is disabled. Here’s how you can do it:

Step 17.1: Launch the Task Scheduler App

Type Task Scheduler in the search bar and open the app.

Step 17.2: Accessing Windows Defender Tasks

Expand the Task Scheduler Library folder in the left pane, followed by Microsoft, Windows, and finally, Windows Defender.

Step 17.3: Disabling the Tasks

Right-click and Disable the following four tasks:

  • Windows Defender Cache Maintenance
  • Windows Defender Cleanup
  • Windows Defender Scheduled Scan
  • Windows Defender Verification

Step 18: Updating the Computer and User Policies

To update the computer and user policies, open the Command Prompt as an administrator and run the following command: gpupdate/force.

And voila! You’ve successfully disabled Windows Defender using the Group Policy settings. After completing these steps, Windows Defender will not start up with Windows.

Method 2: Turning Off Antivirus Windows 11 by Modifying the Registry

An alternative method to turn off antivirus Windows 11 is by modifying the system registry. As with the first method, you’ll need to disable the “Tamper Protection” setting first. Here’s the process:

Step 1: Accessing the Settings

Click on the Start button, then select Settings.

Step 2: Navigating to the Windows Defender Settings

Next, click on Privacy & security, followed by Windows Security, and then Virus & threat protection.

Step 3: Managing the Settings

Under the Virus & threat protection settings, click on Manage settings.

Step 4: Turning Off Tamper Protection

Locate the Tamper Protection option and toggle the switch to Off.

Step 5: Confirming the Changes

A prompt will appear asking if you want to allow the app to make changes to your device. Select Yes to confirm.

Step 6: Closing the Window

Close the window by clicking on the X at the top right.

Once you’ve done that, you can now modify the registry.

Step 6.1: Launching the Registry Editor

Right-click on the Start menu, select Run, and type regedit in the text field, then hit Enter.

Step 6.2: Accessing the Windows Defender Folder

In the Registry Editor, enter the following path in the address field: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender.

To edit or add a value to this folder, you’ll need to change the owner first, which is set as System by default.

Step 7: Changing the Folder Owner

Right-click on the Windows Defender folder and choose Permissions. In the Permissions for Windows Defender window, click on Advanced. In the Owner field, click Change. In the Advanced Security Settings for Windows Defender window, click Advanced. Click on Find Now, then select the admin account or the admin’s group. Click OK to confirm the changes. Check the box next to Replace owner on subcontainers and objects and Replace all child object permission entries with inheritable permission entries from this object. Click Apply, then OK.

Step 8: Granting Full Control to Users

Navigate to the Permissions for Windows Defender window, locate the Permissions for Everyone section, and grant users full control by checking Allow next to the Full Control option. Click on Apply and OK to confirm the change.

Step 9: Editing the Registry

Moving on to the Windows Defender branch in the Registry Editor, create three DWORD (32-bit) values named:

  • DisableAntiVirus
  • DisableAntiSpyware
  • ServiceStartStates

Right-click on each value, select Modify, then change the Value data field to 1. Click on OK, close the Registry Editor, and restart your computer.

Once your computer restarts, Windows Defender will be disabled.

Method 3: Disabling Windows Defender Using Autoruns

Another method to permanently disable Windows Defender is by using the Autoruns for Windows utility tool. Here’s how to do it:

Step 1: Download Autoruns for Windows

Download the latest version of Autoruns for Windows.

Step 2: Extract the Downloaded File

Open the downloaded file and right-click on the Autoruns folder to Extract All. It’s recommended to extract the folder to your desktop for easy access.

Step 3: Disabling Permanent Protection and Booting in Safe Mode

To disable permanent protection and boot your computer in safe mode, press the Windows icon from the taskbar, then choose Settings. Choose Privacy & security, then Windows Security, and finally Virus & threat protection. Under the Virus & threat protection section, select Manage settings. Press the sliders for Real-time Protection and Tamper Protection to deactivate them. Next, to put your computer in Safe Mode, enter a search to find the System Configuration app, then open it. Select the Boot tab, check the Safe boot box, and the Minimal option will set automatically. Click Apply, OK, and then Restart.

Step 4: Running Autoruns

Open the Autoruns folder on your desktop, click the Autoruns64.ex file, then Run to start it. An Autoruns License Agreement window will display. If you agree with the terms, click Agree to continue.

Step 5: Disabling Windows Defender Services

In the Autoruns window, choose the Services tab. Click on Options from the main menu, then uncheck the Hide Windows Entries. Go through the list of services for Windows Defender and uncheck the WinDefend box. This will disable the automatic startup for Windows Defender each time the computer reboots. Close Autoruns and reboot your computer into normal mode.

Step 6: Rebooting Computer into Normal Mode

Press the Search icon on the taskbar and select System Configuration. Check the Normal startup option. Click Apply, OK, then Restart.

Step 7: Verifying the Status of Windows Defender

Upon rebooting, launch Task Manager and check if the Windows Defender service is running. Open Settings to see the Virus & threat protection status. Go to Privacy & security, then Windows Security, and finally Virus & threat protection, then Home. Verify if the Virus & threat protection status is set to Unknown.

Note: Avoid clicking on the Defender tile as it updates its information or displays the “Unknown” status. If you click on it during that time, Defender will be enabled again.

Conclusion

Although Windows Defender is a reliable antivirus tool, there are times when you might need to turn it off. Whether it’s due to resource consumption or any other reason, knowing how to turn off antivirus Windows 11 can be quite handy. This guide provides you with three effective methods to disable Windows Defender permanently. Remember, before you disable Windows Defender, make sure you have another reliable antivirus program installed to keep your computer safe from threats.

--

--