How to Enable Windows Defender Antimalware Real-Time Protection
Microsoft Defender Antivirus is the antivirus component included with Windows 10 and Windows 11. One of its most important features is Real-time protection, which continuously monitors files, programs, and other activity on your computer for potential malware.
Microsoft recommends keeping this protection enabled because turning it off can leave your device more exposed to threats.
In this guide, you will learn what Real-time protection does and how to enable it step by step.
How does Windows Defender Antimalware Real-Time Protection Work?
Windows Defender Antimalware Real-Time Protection continuously monitors your computer for potentially harmful files, applications, and activity. Instead of waiting for you to manually start an antivirus scan, it checks files and programs as they are accessed or executed.
For example, when you download a file from the internet or open a program, Microsoft Defender can examine that activity for signs of malware. If it identifies suspicious behavior or a known threat, Windows Security can alert you and take appropriate action to help prevent the threat from affecting your PC.
Real-time protection works alongside other Windows Security features, including cloud-delivered protection and security intelligence updates. Microsoft Defender receives updated security intelligence through Windows Update, helping it recognize newer threats.
It is important to understand that Real-time protection is different from a manual antivirus scan. Real-time protection monitors activity continuously, while a Quick scan or Full scan is something you start separately when you want Windows to examine your computer for threats.
How to Enable Windows Defender Antimalware Real-Time Protection
If you are wondering how to enable Windows Defender Antimalware real-time protection, the easiest method is through the Windows Security app. Open Windows Security, go to Virus & threat protection, select Manage settings, and turn the Real-time protection switch to On. Microsoft documents this same process for Windows 10 and Windows 11.
Follow the steps below if you are new to Windows or are unsure where to find these settings.
Step 1: Open Windows Security
The first step is to open the Windows Security application. You do not need to download or install it because Windows includes this security app.
Click the Start button or press the Windows key on your keyboard. Once the Start menu appears, type Windows Security into the search box. When Windows Security appears in the search results, select it.
This opens the main Windows Security window. You will see several areas related to your computer’s security, including virus protection, firewall settings, account protection, and other security features.
If you cannot immediately find Windows Security, make sure you type the complete name into the Start search box rather than searching for only “Defender.”
Step 2: Open Virus & Threat Protection
After opening Windows Security, look for Virus & threat protection.
Select Virus & threat protection to open the section that manages Microsoft Defender Antivirus. This page contains information about current threats, previous scans, protection updates, and antivirus settings.
If you see a green check mark or a message indicating that no action is needed, that generally means Windows Security considers your current security configuration to be working normally. However, you can still open the settings to confirm that Real-time protection is enabled.
Step 3: Open Virus & Threat Protection Settings
On the Virus & threat protection page, find the Virus & threat protection settings section.
Under this section, select Manage settings.
This is the area where Windows provides controls for Microsoft Defender Antivirus features such as Real-time protection, Cloud-delivered protection, and other protection settings.
If you are using Windows 11, the wording and appearance may be slightly different from Windows 10, but the basic path remains the same: Windows Security > Virus & threat protection > Manage settings.
Step 4: Turn On Real-Time Protection
Now look for the Real-time protection setting.
If the switch is set to Off, click or select the switch to change it to On.
Once enabled, Microsoft Defender Antivirus can resume continuously monitoring your PC for potential threats. Files and programs you open or download can then be checked for malicious activity.
You normally do not need to restart your computer after enabling this setting. The protection should become active through Windows Security.
Step 5: Confirm That Real-Time Protection Is Enabled
After switching the setting on, take a moment to verify that Real-time protection now shows On.
This confirmation is useful because it tells you that the setting was successfully changed. You can also remain on the same page and review other Microsoft Defender settings.
Microsoft recommends keeping Cloud-delivered protection and Automatic sample submission enabled for optimal protection. These settings work with Defender’s broader threat detection capabilities.
Do not change additional security settings unless you understand what they do. For most users, leaving the recommended Windows Security settings enabled is the simplest approach.
Update Microsoft Defender Security Intelligence
After enabling Real-time protection, it is also a good idea to make sure Microsoft Defender has current security intelligence updates.
Return to the Virus & threat protection page and find Virus & threat protection updates. Select Check for updates if the option is available.
Microsoft Defender uses security intelligence to identify known threats, and Microsoft distributes these updates through Windows Update. Keeping the protection intelligence current helps Defender recognize newer malware.
This step is not required simply to switch Real-time protection on, but it is a useful additional check when you are troubleshooting antivirus protection.
Run a Quick Scan
If Real-time protection was disabled because you were concerned about malware, consider running a Quick scan after turning it back on.
Return to Virus & threat protection and select Quick scan.
Windows Security will check common locations where malware may be found. Microsoft recommends a Quick scan when you suspect that your computer could have a virus or other malware.
If you have a specific reason to believe your PC is infected and a Quick scan does not resolve your concerns, Windows Security also provides additional scan options, including more comprehensive scans.
Keep Real-Time Protection Enabled
Once Real-time protection is working, avoid switching it off unless there is a specific reason to do so.
When Real-time protection is disabled, files you open or download are not checked by this protection feature in real time, which can increase your exposure to malware. Microsoft notes that Real-time protection can automatically turn back on after being disabled for a short period, but you should not rely on this behavior as a substitute for keeping protection enabled.
If another compatible third-party antivirus program is installed and active, Microsoft Defender Antivirus may automatically switch off or enter a different protection mode because the other antivirus product is providing the primary antivirus protection.
What If the Real-Time Protection Setting Is Greyed Out?
Sometimes you may find that the Real-time protection switch cannot be changed. This can happen when security settings are managed by an organization, such as through Group Policy, or when another antivirus program is controlling antivirus protection. Microsoft notes that organization-managed settings can make individual controls unavailable.
If you are using a personal computer, check whether you have another antivirus application installed. A compatible third-party antivirus program can cause Microsoft Defender Antivirus to disable itself.
If the computer belongs to a company, school, or other organization, contact the administrator rather than attempting to override security policies.
FAQs
What is Windows Defender Real-Time Protection?
Real-time protection is a Microsoft Defender Antivirus feature that continuously monitors your computer for potential threats. It can scan files and programs as they are accessed or executed and respond when suspicious activity is detected.
Is Real-Time Protection available in Windows 11?
Yes. Microsoft Defender Antivirus and Windows Security are included with Windows 11, and Real-time protection can be managed through the Windows Security app.
How do I turn on Real-Time Protection in Windows 10?
Open Windows Security, select Virus & threat protection, choose Manage settings, and switch Real-time protection to On. The same general procedure applies to Windows 11.
Why can’t I turn on Real-Time Protection?
The setting may be unavailable because another antivirus program is active or because security policies are controlling the setting. Organization-managed computers can have certain Defender settings locked or unavailable.
Does Real-Time Protection scan downloaded files?
Yes. Real-time protection monitors files and programs as they are accessed or executed. When it is turned off, files you open or download are not scanned by this protection feature in real time.
Should I keep Windows Defender Real-Time Protection on?
For a PC relying on Microsoft Defender Antivirus, keeping Real-time protection enabled provides continuous protection against potential malware. Microsoft warns that disabling Defender without another security product can leave the device vulnerable.
Do I need to restart Windows after enabling Real-Time Protection?
Normally, you do not need to restart your computer after switching Real-time protection on. The setting can be changed directly through Windows Security.
Can I use another antivirus program with Microsoft Defender?
A compatible third-party antivirus program can cause Microsoft Defender Antivirus to automatically switch off or operate differently because the other antivirus program provides the primary antivirus protection.
Summary
Enabling Windows Defender Antimalware Real-Time Protection is a simple way to make sure Microsoft Defender is actively monitoring your Windows PC. Open Windows Security, select Virus & threat protection, choose Manage settings, and turn Real-time protection to On. Microsoft also recommends keeping security intelligence current and enabling related protection features such as Cloud-delivered protection.
If the Real-time protection option is unavailable, check whether another antivirus program is installed or whether your computer is managed by an organization.