

In earlier Windows 10 builds and in Windows Server 2016, you could completely disable Windows Defender using the Turn off Windows Defender Antivirus GPO option located in Computer Configurations -> Administrative Template -> Windows Component -> Windows Defender Antivirus section of the Local Group Policy Editor (gpedit.msc) or using the DisableAntiSpyware registry parameter under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender:

How to Disable Microsoft Defender Antivirus in Windows 11 Permanently? Navigate to Virus and threat protection section, scroll down and switch the Tamper Protection toggle to Off.Īfter disabling Tamper Protection, you will be able to disable Microsoft Defender Real-time Protection using the PowerShell command shown above. You can only disable Tamper Protection manually from Windows Security GUI. If the Tamper Protection is enabled, you won’t be able to disable Real-Time Protection in Microsoft Defender using PowerShell.

In particular, it prevents unauthorized changes of antivirus settings, suspension of real-time protection, and disabling of cloud protection. Tamper protection provides additional protection for core Microsoft Defender security features.
