Windows 10: Defender for business policies

we are about to implement Defender for Business but already use inTune, I'm not sure if I'm just over thinking things but we have some conditional access policies already setup in Endpoint manager, will these be affected if we use DfB as the management system, or should we continue to use Defender for Endpoint as the management system, hope all that makes senseThanksGeoff

:)

 

Windows Defender Group Policy Disabeled

Hi,

Thank you for contacting Microsoft community.

As you have stated you want to disable the group policy so that you can run windows defender on the computer.

I would like to suggest few troubleshooting steps:

Method 1: Disable group policy from gpedit.msc

• 
  Press Windows key + R.
  
• 
  Type gpedit.msc and click Ok.(it will open Local Group policy editor)
  
• 
  Go to Computer Configuration/Administrative Templates/Windows Components/Windows Defender.
  
• 
  In the right pane of
  Windows Defender in Local Group Policy Editor, double click/tap on the
  Turn off Windows Defender policy to edit it.
  
• 
  Select (dot) Not Configured or
  Disabled, click/tap on OK,
  
• 
  When finished, you can close the Local Group Policy Editor if you like.
  

If the issue still persist you can follow method 2.

Method 2: Disable group policy from registry.

Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow
these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the
article in the Microsoft Knowledge Base:

How to back up and restore the registry in Windows

http://support.microsoft.com/kb/322756

• 
  Press Window Key +R.
  
• 
  Type regedit and click. (it will open registry)
  
• 
  Go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
  
• 
  Right Click on Window Defender to create a new Dword.
  
• 
  Click on New and Select Dword.
  
• 
  Type DisableAntiSpyware.
  
• 
  Right click on DisableAntiSpyware and click on modify.
  
• 
  Set the value to 0 instead of 1.
  

Hope this information is helpful. If the issue still persists, you can write back to us and we will be glad to assist you further.

 

Windows Defender group policy disabled and WIndows Defender is not listed in group policy

Ok, I got the message that Windows Defender is disabled by group policy, No big deal, I do a quick search and find where the I can enable it. But Windows Defender is not listed in the group policy. And yes, I am 100% sure about this.

This happened when a shady program got into my PC, it messed things up, but I am mostly back on track, except for Windows Defender.

 

Windows Defender error " This app has been deactivated by the policy group, contact your security administrator"

Hi Teja,

Thank you for posting your query in Microsoft Community.

I understand how you feel when your Windows defender is deactivated. Sorry for the inconvenience. Not to worry, I will assist you with this.

1. Do you have any other third party antivirus installed?

2. Are you logged in as the administrator?

3. Is your computer connected to any Domain?

Please follow these steps and check if that helps.

Method1

If you install a 3rd party anti-virus, Windows 10 will turn off Windows Defender to allow the other anti-virus to run without a conflict. So I suggest you to disable 3rd party Antivirus and check if it helps.

Method2

• Click start->type gpedit.msc and hit enter.
• Navigate to the following location Local Computer Policy -> Administrative Templates -> Windows Components -> Windows Defender.
• Once you Click Windows Defender on the Tree on the LEFT, on the right you should get all the Group Policies. Look for "Turn off Windows Defender" Double click on it and select disable.

Note: If you disable or do not configure this policy setting, by default Windows Defender runs and computers are scanned for spyware and other potentially unwanted software.

Method 3

I would suggest you to check the Service status of Windows Firewall and Windows Defender.

a) Press Windows key + R and type services.msc in the search field and press ENTER.

b) Scroll down to find “Windows Defender Service ".

c) Right-click “Windows Defender service “, and then click Start.

d) Follow the same steps to start "Windows Firewall" service.

e) Check if the issue persists.

Hope this helps. If the issue remains unresolved, please get back to us and we would be happy to help.