If you need to disable Windows Defender or your antivirus software, you are in the right place. This guide covers every method clearly, with real steps, so you can get it done without confusion.
Quick answer: You can disable Windows Defender temporarily through Windows Security settings, Group Policy, Registry Editor, or PowerShell. Third-party antivirus software has its own disable option in the system tray or settings panel.
Before you proceed, understand the risk. Turning off your protection leaves your PC exposed to malware. Only do this for a specific task, like installing trusted software that gets falsely flagged, then turn it back on immediately.
Why You Might Need to Disable Windows Defender or Antivirus
There are legitimate reasons people do this:
- A legitimate program is being blocked or flagged as a threat (false positive)
- You are installing software that conflicts with real-time scanning
- You are running a security test or controlled environment
- You are switching from Windows Defender to a third-party antivirus
- A developer needs to test an application without interference
These are valid cases. The goal is to disable protection temporarily and safely, not permanently.
Method 1: Disable Windows Defender via Windows Security Settings (Quickest Way)
This is the simplest method and works on Windows 10 and Windows 11.
Steps:
- Click the Start menu and type Windows Security, then open it
- Click Virus and threat protection
- Under “Virus and threat protection settings,” click Manage settings
- Toggle Real-time protection to Off
- Click Yes when prompted by User Account Control (UAC)
Windows Defender will be paused. It will automatically re-enable itself after a system restart or after a short period.
Note: In Windows 11 with Tamper Protection enabled, this toggle may snap back on. You need to disable Tamper Protection first (covered below).
How to Disable Tamper Protection First
Tamper Protection prevents unauthorized changes to Windows Defender. If the toggle keeps turning back on, do this:
- Open Windows Security
- Go to Virus and threat protection then Manage settings
- Scroll down to Tamper Protection
- Toggle it Off
- Now go back and disable Real-time protection
Method 2: Disable Windows Defender Using Group Policy Editor
This method is for Windows 10/11 Pro, Enterprise, and Education editions. It does not work on Windows Home.
Steps:
- Press Win + R, type gpedit.msc, press Enter
- Navigate to: Computer Configuration then Administrative Templates then Windows Components then Microsoft Defender Antivirus
- Double-click Turn off Microsoft Defender Antivirus
- Select Enabled (this sounds backwards, but “enabling” this policy turns Defender off)
- Click Apply then OK
- Restart your PC
To reverse this, go back to the same policy and set it to Not Configured.
Method 3: Disable Windows Defender via Registry Editor
Use this method if you are on Windows Home or prefer registry changes. Be careful here. Wrong edits can break things.
Steps:
- Press Win + R, type regedit, press Enter
- Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender - Right-click in the right panel, select New then DWORD (32-bit) Value
- Name it DisableAntiSpyware
- Double-click it and set the value to 1
- Click OK and restart your PC
To re-enable, change the value back to 0 or delete the key entirely.
Always back up your registry before making changes. Press File then Export in Registry Editor to save a backup.
Method 4: Disable Windows Defender Using PowerShell
PowerShell gives you direct control and is useful for advanced users or scripted environments.
Steps:
- Press Win + X and select Windows PowerShell (Admin) or Terminal (Admin)
- Run this command to disable Real-time protection:
Set-MpPreference -DisableRealtimeMonitoring $true
- To re-enable it later:
Set-MpPreference -DisableRealtimeMonitoring $false
You can also disable other components:
| PowerShell Command | What It Does |
|---|---|
Set-MpPreference -DisableIOAVProtection $true | Disables scanning of downloaded files |
Set-MpPreference -DisableBehaviorMonitoring $true | Disables behavior monitoring |
Set-MpPreference -DisableBlockAtFirstSeen $true | Disables cloud-based blocking |
Set-MpPreference -DisableRealtimeMonitoring $true | Disables real-time scanning |
Run Set-MpPreference -DisableRealtimeMonitoring $false to reverse all changes.
Method 5: Disable Windows Defender Permanently Using Group Policy (Advanced)
If you want a more permanent solution for a controlled or offline environment, the Group Policy method from Method 2 combined with disabling Tamper Protection is the most reliable approach.
For enterprise environments, Microsoft Intune or SCCM policies may override local settings. If you are in a corporate setup, contact your IT administrator instead.
How to Disable Third-Party Antivirus Software
If you are using a third-party antivirus like Norton, McAfee, Bitdefender, Avast, or Kaspersky, the process is different for each but follows a similar pattern.
General Steps for Most Antivirus Software
- Find the antivirus icon in your system tray (bottom-right corner of your taskbar)
- Right-click the icon
- Look for an option like Disable, Pause protection, Turn off, or Snooze
- Choose a time duration if prompted (example: 15 minutes, 1 hour, until restart)
- Confirm the action
| Antivirus | Where to Disable |
|---|---|
| Norton 360 | System tray right-click then Disable Auto-Protect |
| Avast | System tray right-click then Avast Shields Control |
| Bitdefender | Settings then Protection then toggle off |
| Kaspersky | System tray right-click then Pause Protection |
| McAfee | System tray right-click then Change settings |
| Malwarebytes | System tray right-click then Quit Malwarebytes |
Full Uninstall vs Temporary Disable
Temporary disable is almost always better. If you uninstall your antivirus, Windows Defender will automatically kick back in to fill the gap. But you lose your settings, subscription license data may reset, and reinstallation takes time.
Only uninstall if you are switching to a different antivirus permanently.
What Happens After You Disable Defender or Antivirus
Here is what you should expect:
- A notification appears in your system tray saying your device is at risk
- Windows Action Center will show a warning
- Real-time scanning stops, meaning threats that arrive during this window go undetected
- Scheduled scans may still run unless separately disabled
- On restart, Windows Defender usually re-enables itself automatically
You should complete your task quickly and re-enable protection as soon as possible.
How to Re-Enable Windows Defender
To turn Windows Defender back on:
- Open Windows Security
- Go to Virus and threat protection then Manage settings
- Toggle Real-time protection to On
Or via PowerShell:
Set-MpPreference -DisableRealtimeMonitoring $false
If you used Group Policy or Registry to disable it, reverse those steps. Simply restarting your PC often brings Defender back if you only used the Settings toggle.
Common Problems When Disabling Windows Defender
Problem: The toggle turns itself back on Solution: Disable Tamper Protection first (see Method 1 steps above).
Problem: “This setting is managed by your organization” Solution: Your PC is on a corporate network or has MDM policies applied. You cannot override this without admin rights. Contact your IT team.
Problem: gpedit.msc is not found Solution: You are on Windows Home. Use Registry Editor (Method 3) or PowerShell (Method 4) instead.
Problem: PowerShell says “Access Denied” Solution: Make sure you opened PowerShell as Administrator (right-click then Run as administrator).
Security Warning: When You Should NOT Disable Your Antivirus
There are situations where disabling protection is a bad idea:
- You are connected to a public Wi-Fi network
- You are about to download files from unknown sources
- Someone else told you to disable it (this is a common social engineering trick used by scammers)
- You received a pop-up or phone call asking you to do this
Legitimate software companies and Microsoft will never ask you to disable your antivirus. If someone is pressuring you to turn it off, it is likely a scam.
According to Microsoft’s official documentation on Windows Security, Tamper Protection exists specifically to prevent malicious software from disabling your defenses without your knowledge.
Adding Exclusions Instead of Disabling (Smarter Alternative)
If the reason you want to disable Defender is because it keeps blocking a specific file or program, adding an exclusion is a much better solution. It lets Defender keep running while ignoring only that one file.
How to add an exclusion in Windows Defender:
- Open Windows Security
- Go to Virus and threat protection then Manage settings
- Scroll down to Exclusions
- Click Add or remove exclusions
- Click Add an exclusion and choose File, Folder, File type, or Process
- Select the item you want to exclude
This is the recommended approach for developers and power users who regularly work with tools that trigger false positives.
For a deeper look at managing Windows Defender settings via command line, Microsoft’s PowerShell documentation for Defender covers every available parameter.
Comparison Table: All Disable Methods at a Glance
| Method | Works on Home? | Permanent? | Skill Level | Reversible? |
|---|---|---|---|---|
| Windows Security Settings | Yes | No (auto re-enables) | Beginner | Yes |
| Group Policy (gpedit.msc) | No (Pro only) | Yes | Intermediate | Yes |
| Registry Editor | Yes | Yes | Intermediate | Yes |
| PowerShell | Yes | No (session only) | Advanced | Yes |
| Third-party antivirus tray | Yes | Temporary | Beginner | Yes |
Conclusion
Disabling Windows Defender or antivirus in 2026 is straightforward once you know which method fits your situation. Use the Windows Security Settings toggle for a quick temporary pause. Use Group Policy or Registry Editor if you need something that survives a restart. Use PowerShell if you are scripting or working in a developer environment. For third-party antivirus tools, the system tray right-click is your fastest route.
Always re-enable protection once your task is done. And if you are only trying to stop one specific file from being blocked, use exclusions instead of disabling everything. That is the smarter, safer path.
Frequently Asked Questions
Does Windows Defender turn back on automatically after I disable it?
Yes. If you use the Settings toggle, Windows Defender typically re-enables itself after a restart or after a short idle period. To keep it off longer, you need to use Group Policy or Registry Editor and also disable Tamper Protection.
Can I disable Windows Defender on Windows 11 Home?
Yes, but you cannot use Group Policy Editor since it is not available on Home editions. Use the Windows Security Settings toggle, Registry Editor, or PowerShell instead.
Is it safe to disable Windows Defender temporarily?
It is relatively safe for a short, controlled task on a trusted network with trusted files. The risk increases significantly if you are connected to the internet, downloading files, or leaving it disabled for extended periods.
Why does my toggle say “managed by your organization”?
This means your PC has enterprise policies applied, either through a corporate network, Microsoft Intune, or Group Policy set by an administrator. You cannot change these settings without administrator access.
What is the difference between disabling real-time protection and turning off Windows Defender completely?
Disabling real-time protection stops active scanning while files are accessed or downloaded. Windows Defender still exists and can run manual scans. Turning off Defender completely through Group Policy or Registry removes it from active use entirely, including scheduled scans and background monitoring.
