Windows 10: Windows Defender AV not disabling

I work for a MSP, and our client has Cylance. For some reason, Windows Defender AV will not disable.


Endpoints in question: Windows 10 Pro, domain joined

Domain functional level: Windows Server 2012 R2


My first attempt was to configure a domain GPO: Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Defender > Turn off Windows Defender = Enabled


I confirmed the endpoints restarted and took the GPO. However, Get-MpComputerStatus returns:


BehaviorMonitorEnabled : True

IoavProtectionEnabled : True

IsTamperProtected : True

NISEnabled : True

OnAccessProtectionEnabled : True

RealTimeProtectionEnabled : True


I then invoked: Set-MpPreference -DisableBehaviorMonitoring $True -DisableIntrusionPreventionSystem $True -DisableIOAVProtection $True -DisableRealtimeMonitoring $True -DisableScriptScanning $True -DisableArchiveScanning $True -DisableCatchupFullScan $True -DisableCatchupQuickScan $True -DisableEmailScanning $True -DisableRemovableDriveScanning $True -DisableRestorePoint $True -DisableScanningMappedNetworkDrivesForFullScan $True -DisableScanningNetworkFiles $True


But Get-MpComputerStatus still returns:


BehaviorMonitorEnabled : True

IoavProtectionEnabled : True

IsTamperProtected : True

NISEnabled : True

OnAccessProtectionEnabled : True

RealTimeProtectionEnabled : True


Please advise how to completely disable Windows Defender AV. However, please keep in mind I want to keep Windows Defender Firewall enabled.


Thanks!

:)

 

How to disable windows defender for long time?

Hi Andrew,

If I understand you correctly you are willing to disable Windows Defender from your system. I would like to know few more things to understand the issue in a better way.

• Why are you trying to disable Windows Defender? Are you planning to install any third party security software?
• From where you have followed the steps to disable Windows defender using registry?
• Are you logged in as Administrator?

The steps which you have mentioned to disable Windows Defender using gpedit.msc is correct. If you are unable to disable it then you may do that by stopping the service responsible for Windows Defender. Here are steps which you may follow to perform the
same task.

• Press Windows key + R to open run box.
• Type services.msc and hit enter.
• There should be 2 services: Windows Defender Service
  and Windows Defender Network14.
• Right click on each and press stop.

If you will stop the service responsible for Windows Defender then it will not run till it is stopped. Do get back to us with all the information required and result of proposed suggestion. We will be happy to assist you further.

Regards,

 

How to disable windows defender for long time?

Dear ramesh,

I too agree with Farah in that the options to start, stop Windows Defender are not clickable. There should be a way to stop the WD

 

Can't turn on Windows Defender, message that another AV program is running

I only have windows defender on my computer. It still says that another AV program is running and I cannot turn on window defender's AV.

Any suggestions??

Matt

Original title: windows defender