How to Disable Defender Antivirus & Firewall in Windows 10

Last updated on November 4th, 2019

This tutorial shows the way to completely disable Defender Security Center and all the Defender protection services (Antivirus, Firewall, Threat protection) in Windows 10. Before you continue to apply the steps mentioned below, you must know that Windows 10, enables by default the Defender Antivirus and the Defender Firewall, if no any other security program has installed on the computer.

Disable Defender Security Antivirus

That means that if you install another security program to protect your PC, Windows Defender will be disabled automatically by Windows 10 and there is no need to perform any other action to disable Defender. So, follow the steps in this tutorial only if you face problems with Windows Defender protection or if you want to permanently remove the Windows Defender antivirus and/or firewall for other reasons.

How to Disable Windows Defender Security Center (Antivirus, Firewall, etc.)

Method 1. Disable Windows Defender Antivirus from Windows GUI.
Method 2. Disable Windows Defender Antivirus by editing the registry Offline.
Method 1. Disable Windows Defender Antivirus from Windows GUI.

Step 1. Turn OFF Windows Defender Antivirus Real Time Protection.

To turn off Real-time Protection, double click at Windows Defender icon image in the taskbar, click Virus & threat protectionimageand then at Virus & threat Protection settings set to OFF the Real-time Protection and the Cloud-delivered protection.

 Turn off Defender real-time protection

Step 2. Modify Registry Permissions and Disable Defender Antispyware & Antivirus Protection.

1. Open Registry editor. To do that:

1. Simultaneously press  the “WinImage-201_thumb_thumb_thumb_thumb1_t  + “R” keys to load the Run dialog box.
2. Type regedit and press Enter to open Registry Editor.

registry editor

2. Navigate (from the left pane) to this registry location/key:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender

3. (IMPORTANT): Before you continue, first take a backup of the "Windows Defender" registry key settings, and then use the backup file if something goes wrong. To take a backup of 'Windows Defender' key:

1. Right click on "Windows Defender" key and select Export.

disable windows defender firewall

2. Type a filename for the registry backup file (e.g. "Windows Defender") and Save the file at your Desktop. *

* Note: If needed, double click at the exported .reg file, to restore your registry back!

defender registry

4. Right click at the Windows Defender key and select Permissions.

fix Cannot Enable Windows Defender

5. At 'Permissions for Windows Defender' window, click Advanced.

Cannot start Windows Defender

6. Click Change Owner.

Cannot start Security Essentials

7. Type Administrators and press OK.

disable defender

8. Check the "Replace owner on subcontainers and objects" checkbox and click Apply.

Disable Windows Defender Registry

9. Then double-click to open Administrators entry.

Windows Defender won't turn on

10. Select the Full Control checkbox and press OK three (3) times. *

* Update (October 2019): After the latest Windows 10 system update, Microsoft doesn't allow to modify the permissions on the 'Windows Defender' key with error "Unable to save permission changes on Windows Defender. Access is denied". If you face this error, then skip the rest instructions of this step (press OK -> Cancel and OK to close the permissions window), and continue to Step-3 below.

change permissions registry

11. At the right-pane of Windows Defender key:

11a. Open the DisableAntiSpyware REG_DWORD value and change the Value data from 0 to 1 disable Windows Defender Antispyware protection. Click OK when done. *

* Note: If you cannot edit (modify) the value data, then close and re-open Registry Editor or make sure that the "Real Time Protection' remains off  (step-1).

disable defender windows 10

11b. Then open the DisableAntiVirus REG_DWORD value and change the Value data from 0 to 1 disable Windows Defender Antivirus protection. Click OK when done.

disable defender antivirus windows 10

12. Proceed to the the next step to disable Windows Defender Services.

Step 3. Disable Defender Security Center, Antivirus & Firewall Services.

The final step is to disable the Defender's services, as described below: *

* Note: If you cannot modify one (or more) of the mentioned registry values with error "Cannot Edit Start: Error writing the value's contents", then proceed and modify the registry offline, by following the steps at method-2 below.

1. To Disable the Windows Defender Security Center Service, modify the Start REG_DWORD value, from 2 to 4 at the following registry key:

  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecurityHealthService

disable defender security center windows 10

2. To Disable the Windows Defender Antivirus Service,modify the Start REG_DWORD value, from 3 to 4 at the following registry key:

  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend

3. To Disable the Windows Defender Antivirus Network Inspection Service, modify the Start REG_DWORD value, from 3 to 4 at the following registry key:

  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc

4. To Disable the Windows Defender Firewall Service, modify the Start REG_DWORD value, from 2 to 4 at the following registry key:

  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc

5. Close registry editor and restart your computer.

Method 2. How to Disable the Windows Defender by Editing the Registry Offline.

Step 1. Create a System Restore Point. *

* Note: This step is optional, but, for precautionary reasons I suggest to create a restore point of your system current state in order to restore your PC if something goes wrong.

To Create a restore point:

1. Open Windows Explorer.
2. At the left pane, right-click on "This PC" icon and select Properties.
3. Click System Protection.
4. At System Protection settings, click Configure.

image

5. At Restore Settings window:

a. Check the Turn on system protection.
b. Adjust the maximum disk space used for system protection, to (about) 10-15% of the maximum disk space.
c. Click OK.

Enable system protection windows 10

6. Now click Create to create a restore point of the current state.

image

7. Type a recognizable name for the restore point and click Create.
8.
When the operation is completed, continue to next step.

Step 2. Disable Windows Defender services Offline.

1. Proceed and start Windows 10 in recovery mode. To do that use one of the following ways:

A. From Windows GUI: Right click on Start menu and then press the Restart button while pressing the SHIFT key on your keyboard.

B. From Windows Sign-in screen: Click on the Power button and then choose Restart while pressing the SHIFT key on your keyboard.

Start Windows 10 in Recovery Mode

2. At Recovery options, go to Troubleshoot -> Advanced Options -> Command Prompt. (Your computer will restart)
3. After restart, select an account with administrative privileges, type the password (if any) and click Continue.
4. In command prompt window type regedit and press Enter.

image

5. In Registry Editor, highlight the HKEY_LOCAL_MACHINE key.

image

6. From File menu, select Load Hive.

image

7. At 'Look in' select the disk where Windows are installed on (commonly is listed as disk "D:").

image

8. Now navigate to the following path on the OS disk:

  • Windows\system32\config\

9. Highlight the SYSTEM file and click Open.

image

10. Type a Key Name for the offline registry database (e.g. "Offline") and press OK.

image

11. Now navigate at the following registry keys and set the Start value to 4 :

  • HKEY_LOCAL_MACHINE\Offline\SYSTEM\ControlSet001\Services\MpsSvc
  • HKEY_LOCAL_MACHINE\Offline\SYSTEM\ControlSet001\Services\SecurityHealthService
  • HKEY_LOCAL_MACHINE\Offline\SYSTEM\ControlSet001\Services\WdNisSvc
  • HKEY_LOCAL_MACHINE\Offline\SYSTEM\ControlSet001\Services\WinDefend

12. When done, highlight the key you previously created (e.g. the "Offline" key ) and from the File menu, choose Unload Hive to write back the changes you made to the Registry.

image

13. Select Yes when asked to unload the current key,

image

14. Close the 'Registry Editor' and the 'Command Prompt' windows.
15. Click Turn off your PC.

image

16. Power On you PC and boot to Windows normally.

You 're done! Let me know if this guide has helped you by leaving your comment about your experience. Please like and share this guide to help others.

If this article was useful for you, please consider supporting us by making a donation. Even $1 can a make a huge difference for us in our effort to continue to help others while keeping this site free: