Fix Windows Defender That Keeps Re-enabling itself on Windows 11
Windows Security, previously known as Windows Defender, is designed to protect your Windows 11 PC from malware, viruses, ransomware, and other threats. While this security feature is beneficial for most users, some people prefer using a third-party antivirus program or temporarily disabling Windows Defender for troubleshooting purposes.
However, many Windows 11 users notice that even after turning off Windows Defender, it automatically turns itself back on after a restart, Windows update, or after some time has passed. This behavior can be frustrating, especially if you intentionally disabled it and want it to remain off.
In this guide, you will learn why this happens and how to fix it.
Fix Windows Defender That Keeps Re-enabling Itself on Windows 11
To fix Windows Defender that keeps re-enabling itself on Windows 11, first disable Tamper Protection from the Windows Security settings. Then, use the Local Group Policy Editor to permanently disable Microsoft Defender Antivirus. If you use Windows 11 Home, you can achieve the same result through the Registry Editor. Restart your computer after applying the changes. If you have a third-party antivirus installed, ensure it is correctly configured and up to date so Windows recognizes it as your primary security solution.
Windows Defender often turns back on automatically because Windows 11 is designed to ensure that every device maintains active security protection. Features such as Tamper Protection, Windows Updates, and incorrect registry configurations can override temporary changes and reactivate Defender.
Let’s resolve this issue in detail!
Step 1: Disable Tamper Protection
The first and most important step is turning off Tamper Protection. This feature prevents changes to Microsoft Defender settings and can undo your attempts to disable it.
To begin, click the Start button and type Windows Security into the search bar. Open the Windows Security application from the search results.
In the Windows Security window, select Virus and threat protection from the left pane. Scroll down until you find Virus and threat protection settings, then click Manage settings.
Continue scrolling until you locate the Tamper Protection option. If the toggle is switched on, click it to turn it off. You may receive a User Account Control prompt asking for administrator permission. Select Yes to continue.
Disabling Tamper Protection allows you to make additional changes without Windows automatically reversing them. This step is essential because leaving Tamper Protection enabled may cause Windows Defender to reactivate even after applying other fixes.
After disabling Tamper Protection, leave the Windows Security app open or proceed to the next step.
Step 2: Disable Microsoft Defender Using Group Policy Editor
The Local Group Policy Editor provides one of the most effective methods to prevent Windows Defender from turning itself back on. This option is available on Windows 11 Pro, Enterprise, and Education editions.
Press Windows + R on your keyboard to open the Run dialog box. Type gpedit.msc and press Enter.
Once the Local Group Policy Editor opens, navigate to the following path:
Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus
In the right pane, locate the setting named Turn off Microsoft Defender Antivirus and double-click it.
A new window will appear containing several configuration options. Select Enabled and then click Apply, followed by OK.
Although choosing “Enabled” may seem confusing, enabling this particular policy means that Microsoft Defender Antivirus will be turned off.
Next, navigate to:
Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > Real-time Protection
Locate Turn off real-time protection and double-click it. Choose Enabled, then click Apply and OK.
Close the Group Policy Editor and restart your computer.
After restarting, Windows Defender should remain disabled instead of re-enabling itself automatically.
Step 3: Use Registry Editor on Windows 11 Home
Users running Windows 11 Home do not have access to the Local Group Policy Editor. In this case, the Registry Editor provides an alternative method.
Before making changes, consider creating a system restore point. Registry modifications affect important Windows settings, so proceeding carefully is important.
Press Windows + R, type regedit, and press Enter. Click Yes if prompted by User Account Control.
Navigate to the following registry location:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
If the Windows Defender key does not exist, right-click the Microsoft folder, select New, choose Key, and name it Windows Defender.
Right-click within the empty area of the right pane. Select New, then choose DWORD (32-bit) Value.
Name the new value DisableAntiSpyware.
Double-click the newly created value and change the Value data from 0 to 1. Click OK to save the change.
Close Registry Editor and restart your computer.
After the restart, Windows Defender should no longer automatically reactivate. If the issue persists, verify that Tamper Protection remains disabled.
Step 4: Check Third-Party Antivirus Installation
If you use another antivirus program, Windows Defender typically disables itself automatically. However, problems can occur if the third-party antivirus is outdated or improperly installed.
Open your antivirus software and verify that it is functioning correctly. Check whether virus definitions and the application itself are fully updated.
If you recently installed the antivirus program, consider uninstalling it and reinstalling the latest version from the official website.
To remove an antivirus application, open Settings, select Apps, then choose Installed apps. Locate the antivirus software, click the three-dot menu next to it, and select Uninstall.
Restart your computer after reinstalling the software.
A properly functioning third-party antivirus should prevent Windows Defender from re-enabling itself because Windows recognizes that another security solution is already protecting the device.
Step 5: Prevent Windows Updates From Reverting Security Settings
Sometimes, major Windows updates restore default security configurations, causing Defender to become active again.
Open Settings by pressing Windows + I. Select Windows Update from the left sidebar.
Check for recent updates that may have changed your security settings. If Windows Defender started re-enabling itself after a major feature update, you may need to repeat the Group Policy or Registry modifications.
Keeping track of update installations can help identify whether updates are responsible for restoring Defender.
While disabling updates entirely is not recommended because it may expose your system to security vulnerabilities, understanding this behavior allows you to quickly apply your preferred settings after updates occur.
Step 6: Restart and Verify the Changes
After completing the previous steps, restart your computer to ensure the changes take effect properly.
Once Windows loads again, open Windows Security and navigate to Virus and threat protection.
Verify whether Microsoft Defender remains disabled. If the settings remain unchanged after restarting, the issue has been resolved successfully.
If Defender continues to reactivate, revisit each step carefully. In many cases, Tamper Protection was not disabled before making the changes, which prevents the modifications from taking effect.
Patience and attention to detail are often the key to resolving this issue.
Frequently Asked Questions
Is it safe to disable Windows Defender on Windows 11?
Disabling Windows Defender is generally safe only if you have another reputable antivirus solution installed. Running a computer without any form of antivirus protection increases the risk of malware infections and security threats.
Why does Windows Defender keep turning itself back on?
Windows Defender automatically re-enables itself because Windows 11 prioritizes system security. Features such as Tamper Protection, Windows Updates, and missing antivirus protection can trigger this behavior.
Can I permanently disable Windows Defender on Windows 11 Home?
Yes. Since Windows 11 Home does not include the Group Policy Editor, you can use the Registry Editor to disable Windows Defender. Ensure that Tamper Protection is turned off before making registry changes.
Does installing another antivirus disable Windows Defender automatically?
Yes. In most situations, Windows detects the presence of a compatible third-party antivirus program and automatically disables Microsoft Defender to avoid conflicts.
Will Windows Updates undo my changes?
Major feature updates occasionally restore default security settings. If this occurs, you may need to repeat the steps outlined in this guide.
Can I re-enable Windows Defender later?
Yes. You can reverse the changes by enabling Tamper Protection again and removing the Group Policy or Registry modifications you previously applied.