How to Disable Defender Antivirus & Firewall in Windows 10

This tutorial shows the way to completely disable Defender Security Center and all the Defender protection services (Antivirus, Firewall, Threat protection) in Windows 10. Before you continue to apply the steps mentioned below, you must know that Windows 10, enables by default the Defender Antivirus and the Defender Firewall, if no any other security program has installed on the computer.

That means that if you install another security program to protect your PC, Windows Defender will be disabled automatically by Windows 10 and there is no need to perform any other action to disable Defender. So, follow the steps in this tutorial only if you face problems with Windows Defender protection or if you want to permanently remove the Windows Defender antivirus and/or firewall for other reasons.

How to Disable Windows Defender Security Center (Antivirus, Firewall, etc.)

Method 1. Disable Windows Defender Antivirus from Windows GUI.

Method 2. Disable Windows Defender Antivirus by editing the registry Offline.

Method 1. Disable Windows Defender Antivirus from Windows GUI.

Step 1. Turn OFF Windows Defender Antivirus Real Time Protection.

To turn off Real-time Protection, double click at Windows Defender icon in the taskbar, click Virus & threat protectionand then at Virus & threat Protection settings set to OFF the Real-time Protection and the Cloud-delivered protection.

Step 2. Modify Registry Permissions and Disable Defender Antispyware & Antivirus Protection.

1. Open Registry editor. To do that:

1. Simultaneously press  the “Win”   + “R” keys to load the Run dialog box.
2. Type regedit and press Enter to open Registry Editor.

2. Navigate (from the left pane) to this registry location/key:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender

3. (IMPORTANT): Before you continue, first take a backup of the "Windows Defender" registry key settings, and then use the backup file if something goes wrong. To take a backup of 'Windows Defender' key:

1. Right click on "Windows Defender" key and select Export.

2. Type a filename for the registry backup file (e.g. "Windows Defender") and Save the file at your Desktop. *

* Note: If needed, double click at the exported .reg file, to restore your registry back!

4. Right click at the Windows Defender key and select Permissions.

5. At 'Permissions for Windows Defender' window, click Advanced.

6. Click Change Owner.

7. Type Administrators and press OK.

8. Check the "Replace owner on subcontainers and objects" checkbox and click Apply.

9. Then double-click to open Administrators entry.

10. Select the Full Control checkbox and press OK three (3) times. *

* Update (October 2019): After the latest Windows 10 system update, Microsoft doesn't allow to modify the permissions on the 'Windows Defender' key with error "Unable to save permission changes on Windows Defender. Access is denied". If you face this error, then skip the rest instructions of this step (press OK -> Cancel and OK to close the permissions window), and continue to Step-3 below.

11. At the right-pane of Windows Defender key:

11a. Open the DisableAntiSpyware REG_DWORD value and change the Value data from 0 to 1 disable Windows Defender Antispyware protection. Click OK when done. *

* Note: If you cannot edit (modify) the value data, then close and re-open Registry Editor or make sure that the "Real Time Protection' remains off  (step-1).

11b. Then open the DisableAntiVirus REG_DWORD value and change the Value data from 0 to 1 disable Windows Defender Antivirus protection. Click OK when done.

12. Proceed to the the next step to disable Windows Defender Services.

Step 3. Disable Defender Security Center, Antivirus & Firewall Services.

The final step is to disable the Defender's services, as described below: *

* Note: If you cannot modify one (or more) of the mentioned registry values with error "Cannot Edit Start: Error writing the value's contents", then proceed and modify the registry offline, by following the steps at method-2 below.

1. To Disable the Windows Defender Security Center Service, modify the Start REG_DWORD value, from 2 to 4 at the following registry key:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecurityHealthService

2. To Disable the Windows Defender Antivirus Service,modify the Start REG_DWORD value, from 3 to 4 at the following registry key:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend

3. To Disable the Windows Defender Antivirus Network Inspection Service, modify the Start REG_DWORD value, from 3 to 4 at the following registry key:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc

4. To Disable the Windows Defender Firewall Service, modify the Start REG_DWORD value, from 2 to 4 at the following registry key:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc

5. Close registry editor and restart your computer.

Method 2. How to Disable the Windows Defender by Editing the Registry Offline.

Step 1. Create a System Restore Point. *

* Note: This step is optional, but, for precautionary reasons I suggest to create a restore point of your system current state in order to restore your PC if something goes wrong.

To Create a restore point:

1. Open Windows Explorer.
2. At the left pane, right-click on "This PC" icon and select Properties.
3. Click System Protection.
4. At System Protection settings, click Configure.

5. At Restore Settings window:

a. Check the Turn on system protection.
b. Adjust the maximum disk space used for system protection, to (about) 10-15% of the maximum disk space.
c. Click OK.

6. Now click Create to create a restore point of the current state.

7. Type a recognizable name for the restore point and click Create.
8. When the operation is completed, continue to next step.

Step 2. Disable Windows Defender services Offline.

1. Proceed and start Windows 10 in recovery mode. To do that use one of the following ways:

A. From Windows GUI: Right click on Start menu and then press the Restart button while pressing the SHIFT key on your keyboard.

B. From Windows Sign-in screen: Click on the Power button and then choose Restart while pressing the SHIFT key on your keyboard.

2. At Recovery options, go to Troubleshoot -> Advanced Options -> Command Prompt. (Your computer will restart)
3. After restart, select an account with administrative privileges, type the password (if any) and click Continue.
4. In command prompt window type regedit and press Enter.

5. In Registry Editor, highlight the HKEY_LOCAL_MACHINE key.

6. From File menu, select Load Hive.

7. At 'Look in' select the disk where Windows are installed on (commonly is listed as disk "D:").

8. Now navigate to the following path on the OS disk:

• Windows\system32\config\

9. Highlight the SYSTEM file and click Open.

10. Type a Key Name for the offline registry database (e.g. "Offline") and press OK.

11. Now navigate at the following registry keys and set the Start value to 4 :

• HKEY_LOCAL_MACHINE\Offline\SYSTEM\ControlSet001\Services\MpsSvc
• HKEY_LOCAL_MACHINE\Offline\SYSTEM\ControlSet001\Services\SecurityHealthService
• HKEY_LOCAL_MACHINE\Offline\SYSTEM\ControlSet001\Services\WdNisSvc
• HKEY_LOCAL_MACHINE\Offline\SYSTEM\ControlSet001\Services\WinDefend

12. When done, highlight the key you previously created (e.g. the "Offline" key ) and from the File menu, choose Unload Hive to write back the changes you made to the Registry.

13. Select Yes when asked to unload the current key,

14. Close the 'Registry Editor' and the 'Command Prompt' windows.
15. Click Turn off your PC.

16. Power On you PC and boot to Windows normally.

You 're done! Let me know if this guide has helped you by leaving your comment about your experience. Please like and share this guide to help others.

If this article was useful for you, please consider supporting us by making a donation. Even $1 can a make a huge difference for us in our effort to continue to help others while keeping this site free: