Windows 10: Defender not disabled with third party av - still passiv mode

Hello everyone,We are currently testing Windows 11 in our company 23H2.We are using BitDefender Endpoint Security Tools for endpoint protectionUnder Windows 10 22H2, the "Get-MPComputerStatus" command shows us a "False" for the AMRunningMode value.I expect this to be the case, as another AV solution is installed.There is also no MsMpEng.exe running and the Microsoft Defender Antivirus service is set to Manual and is not running.So far so good - that's what I expect.Under Windows 11 23H2 the whole thing looks like thisGet-MPComputerStatus shows a "Passive Mode" for the value "AMRunningMode".M

:)

 

Defender in Passive Mode?

I installed Avast (free version) on my new pc because I have had good success with Avast on my Mac for years.

I have repeatedly read that if third-party AV software is installed, Defender will automatically be disabled. This does not appear to be the case because in the System Tray I have the Defender Icon showing with a green checkmark. If I click the Defender icon the Defender Security Center opens and I get green checkmarks across the board.

I googled and found information about Defender's "Passive Mode," but I don't know if that's what's going on:

Windows Defender Antivirus compatibility with other security products | Microsoft Docs

I also found information about Defender not turning off even when third-party AV software is installed.:

http://www.thewindowsclub.com/window...l-not-turn-off

I would like to know if Defender is in Passive Mode, which I suppose is okay, or if it is running, and if so, what to do about it.

 

3rd party AV program

The message you are describing may be observed if another antivirus program is still installed or there are remnants of a third party antivirus program still installed.

https://support.microsoft.com/en-us...b59cebc4f24/how-to-protect-your-windows-10-pc
Note the statement "If you want to use Windows Defender Antivirus, uninstall all of your other antivirus programs and Windows Defender Antivirus will automatically turn on. You may be asked to restart your device."

Go to Security and Maintenance, look in 'Security' and see what program is listed under Virus Protection. Windows Defender will not be enabled and functioning properly if there is a program other than Windows Defender listed.

For further information see the reply of quietman7 in Redirecting

You may want to try the steps recommended in Problems
starting Windows Defender in Windows 8/8.1/10 to include running SFC, scanning for malware with Malwarebytes and running the software removal tools for any security software (Avast,
AVG, McAfee, Norton, whatever) that may have previously been on the computer followed by a reboot? List of
anti-malware product removal tools

And see Configure Windows Defender in Windows
8, 8.1 and 10

If you can't resolve this issue suggest you post back in this thread and provide additional information.

Regards…

Top 10 Ways PUPs Sneak Onto Your Computer. And How To Avoid Them.

 

Defender AV Security Intelligence and Product Updates for Azure Virtual Desktops.

I have persistent AVDs with Defender AV running in passive mode. I need to know what's the default method for Defender AV to receive Security Intelligence Updates and Product updates on these AVDs. Does it automatically reach out to the windows update servers to get updates, or do I need to configure something to setup these updates?

This article has me confused, Configure Microsoft Defender Antivirus on a remote desktop or virtual desktop infrastructure environment | Microsoft Learn

Do I need to follow the step mentioned in this article or it is not required to get the updates?