Windows 10: Windows Defender is 'Stopped' under System Configuration. How to change?

submitted by /u/bozua
[link] [comments]

:)

 

is there any demand for a system configurator?

Processor(V) <--drop down arrow
-AMD(V)
--Socket(V)
---AM2(V)
----List of cpu's
---939(V)
----List of CPU's
-Intel(V)
--Socket(V)
---775(V)
----List of cpu's
---771(V)
----List of CPU's


etc etc.

 

Configuring Windows Defender/Update via Powershell/registry:


I have the following powershell script
Code:

Code:

    Set-ItemProperty "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" -Name DisableAntiSpyware -Value 0x00000001      New-Item -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows" -name WindowsUpdate      New-Item -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate"-Name AU      Set-ItemProperty "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name NoAutoUpdate -Value 0x00000000      Set-ItemProperty "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name AUOptions -Value 0x00000002

Basically, it turns off Windows Defender and stops Microsoft from auto-updating my computer. I restarted by computer and when I checked the Windows Defender/Update settings via gpedit, the changes I made via registry are not reflected.
As a test, I tried:

1. Deleting the entries I made.
2. Configure Windows Defender/Update via gpedit.
3. Export Windows Defender/Update registry setting.
4. Change Windows Defender/Update to an unconfigured state.
5. Close gpedit.
6. Import registry setting from step3.
7. Open gpedit again and check Windows Defender/Update. Both components are still in unconfigured state.

As another test, I also tried:

1. Configuring Windows Defender/Update via gpedit.
2. Delete Windows Defender/Update registry setting.
3. Open gpedit again and check Windows Defender. Both components are still configured.

Any ideas what I could be doing wrong? Thanks

 

"Attestation" A new feature coming to Windows Defender in Windows 10

Tech Republic - Upcoming Windows Defender feature will tell you when security fails

This seems very promising. Microsoft is in the unique position to know what Windows should look like, even before Windows Update pushes out new changes. As long as MS can properly sync WD with WU changes AND this new features does not make any "noticeable" hit on system performance/resources, all without any false positives, this should be a big step forward for consumer security, and a blow to the bad guys - always a good thing.

Of course, there will likely be some hiccups the Windows/Microsoft/Windows Defender bashers will surely pounce on - regardless how extensive the Beta process is. But hopefully open and unbiased minds will prevail. After all, the goal is to stop the bad guys and if this gets us closer to that, that's a very good thing.

For more detailed information, see Introducing Windows Defender System Guard runtime attestation)