Windows 10: Turn On or Off Windows Defender Real-time Protection in Windows 10

thanks Brink that is handy dandy....

 

Although you say it in words in step 1, it was not that obvious to me how to turn off defender temporarily since CU version as the required link is a bit obscure and I missed it at first.

An additional screen dump would helpful.

 

@cereberus,

Tutorial now updated with the latest screenshots. *Smile

 

Hi

Are the options five and six still valid for Windows 10 v1709?

Thanks

Bye

 

Hello balubeto, *Smile

It sure is.

 

Thanks ! Everything was fine with the commercial mapping software I have been using for years, and Defender stopped the image exports using Imagemagic. Now I do have anti virus/trojan software, so I just needed to fix Defender which suddenly decided to block me from making maps and exporting as png/bmp/jpg.

And Thanks Brink !

edit;

ImageMagick.

Even thoguh I have Defender off for over a year, it downloaded new definiitons and did a scan. Even though I have scan and it turned off. I fixed a typo or two as well above.

 

I'm attempting to create a CMD script to toggle Real-time protection on and off. If protection is off, the script will toggle it on; however, if protection is on, the script fails with "Error: Access is denied." Any ideas how to fix this issue?

Code: @echo off cls :: toggles window defender realtime monitoring :: if DisableRealtimeMonitoring is 1 then it is OFF :: if DisableRealtimeMonitoring is 0 then it is ON :: look for DisableRealtimeMonitoring value (0) - if it is found then Real-time protection is ON REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring | Find "0x0" IF %ERRORLEVEL% == 1 goto found IF %ERRORLEVEL% == 0 goto notfound goto end :notfound cls echo. echo. echo. echo Real-time protection is ON - so turn it OFF REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f echo Real-time protection is now OFF goto end :found cls echo. echo. echo. echo Real-time protection is OFF - so turn it ON REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 0 /f echo Real-time protection is now ON :end echo. echo. echo. pause[/quote]

 

[/quote] Run it as an Admin or give it Administrative privileges .

 

Tried that. Doesn't make any difference. I also experimented with the permissions for the registry key but that did not get me anywhere either.

 

Hello cb360t, *Smile

If you like, you might see if using the PowerShell commands in Option Four to toggle on/off Windows Defender Real-Time Protection may work better for you.

You can use Get-MpPreference like below to check the current setting.

*Arrow Get-MpPreference

 

Hi Brink,

I found a toggle solution at this site:
https://www.addictivetips.com/window...on-windows-10/

Thanks for pointing me in the right direction. *Wink

Now if I could just understand why this produces an error (cmd prompt - running as administrator):
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f

*Banghead

 

When turned on, Windows Defender protects its registry key, and would be why you get an "Access Denied" message.

It's a security measure to help prevent malware from being able to turn off Real-Time protection.

 

I used the reg file to turn off Defender. Then it started telling me I had turned off Defender and I was helpless. Well, I have pcmatic. So I'm neither helpess nor defenseless. Composer update crashed my cmoputer last fall. MS has some serious problems they need to fix. Yes Brink, I know, they will claim they don't make mistakes. And yet they do... :-|

Apparently MS is trying their level best to make more people go to Linux... unfortunately I can't play Everquest on Linux, the nice people at daybreak Games don't like Linux. Yes peanut gallery, Everquest is still around.

 

Update on the Powershell script to display the status of Real-time Protection when you toggle it.


Open Notepad and paste the following in it. Save it as tog.ps1.


Code: $preferences = Get-MpPreference #gets preferences for the Windows Defender scans and updates Set-MpPreference -DisableRealtimeMonitoring (!$preferences.DisableRealtimeMonitoring) #toggle Real-time Protection ON/OFF $status = $preferences.DisableRealtimeMonitoring #store current status of Real-time Protection in $status Write-host " " if ($status) { Write-host "Real-time Protection is ON" } Else { Write-host "Real-time Protection is OFF" } Write-host " " Write-host "Press any key to exit" $host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")|out-null #pause and wait for key press[/quote]
Right-click on an empty area on your desktop and select Shortcut.
Paste the following in the ‘Browse’ box but replace the ‘Path to script’ with the actual path to the script you created.

%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -File "C:\Utilities\+Misc\tog.ps1"

Once you’ve created the shortcut, right-click it and select the ‘Run as administrator’ option.
When you run the script, the current status of Real-time Protection will be displayed as ON or OFF.
Of course, you can also pin the shortcut to the start menu and/or the taskbar.

 

small typo in section 4.2

the $true and $false are backwards - in powershell $false is 0 and $true is 1 (or any other number).