Windows 10: Windows Defender overriding GPEdit and Registry

Windows 11 IoT for a device that is not connected to the internet once installed except for occasional updates. I have it turned off in both GPEdit and in Registy as it keeps deleting a 3rd party program. How can I stop Windows defender from overriding both the registry and GPEdit? If I turn it off in GPEdit under "Turn off Microsoft Defender Antivirus" it changes the setting back to not configured instead of enabled. In the registry if "DisableAntiSpyware" is set to 1 it deletes the DWORD from HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindows Defender.

:)

 

What the hell, windows defender?

So, a while back I disabled windows defender via gpedit. Come to find out it's running again, and telling me my miner is a "severe" threat, despite still being disabled in gpedit. There's a few new entries related to windows defender in gpedit that didn't used to be there before. I'm guessing this happened during the big spring update. UAC keeps becoming re-enabled somehow, as well. For now I have a shitty registry key that's supposed to disable windows defender instead, hopefully it works.

Damn, Microsoft. They were pushing users to upgrade to 10 so hard, even resorting to plain trickery to get it on as many machines as possible. Now not only is it doing hardcore data mining in the background, but it's changing settings all on its own to whatever Microsoft wants. One step closer to pushing me to Ubuntu or something. I'd already be there if I didn't think it would be an arduous task learning how to computer all over again while simultaneously breaking a lot of games, which is mostly what I use this computer for...

Bill Gates needs to go back to Microsoft just so he can kick all the guys responsible for w10 squarely in the nuts. /rant

 

What the hell, windows defender?

Big Brother knows what is best for you, why do you resist?

 

Configuring Windows Defender/Update via Powershell/registry:


I have the following powershell script
Code:

Code:

    Set-ItemProperty "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" -Name DisableAntiSpyware -Value 0x00000001      New-Item -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows" -name WindowsUpdate      New-Item -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate"-Name AU      Set-ItemProperty "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name NoAutoUpdate -Value 0x00000000      Set-ItemProperty "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name AUOptions -Value 0x00000002

Basically, it turns off Windows Defender and stops Microsoft from auto-updating my computer. I restarted by computer and when I checked the Windows Defender/Update settings via gpedit, the changes I made via registry are not reflected.
As a test, I tried:

1. Deleting the entries I made.
2. Configure Windows Defender/Update via gpedit.
3. Export Windows Defender/Update registry setting.
4. Change Windows Defender/Update to an unconfigured state.
5. Close gpedit.
6. Import registry setting from step3.
7. Open gpedit again and check Windows Defender/Update. Both components are still in unconfigured state.

As another test, I also tried:

1. Configuring Windows Defender/Update via gpedit.
2. Delete Windows Defender/Update registry setting.
3. Open gpedit again and check Windows Defender. Both components are still configured.

Any ideas what I could be doing wrong? Thanks