Fix Windows Defender Not Turning On

Windows Defender (now called Microsoft Defender Antivirus) can fail to turn on due to leftover third-party antivirus software, corrupted system files, or incorrect Group Policy settings. This guide walks you through the most effective fixes, from quick registry checks to a full system restore, so you can get real-time protection running again.

What You’ll Need

• Administrator access to your Windows PC
• An internet connection (for downloading updates or the Microsoft Safety Scanner)
• About 20–30 minutes of time

Step-by-Step

1. Restart your PC. Sounds basic, but a simple reboot clears temporary glitches that often prevent Defender from starting. Save your work and restart, then check if Defender is now on.
2. Check if another antivirus is installed. Windows automatically disables Defender when it detects a third-party AV. Go to Settings → Apps → Installed apps and look for any antivirus or security suite (e.g., McAfee, Norton, Avast, Bitdefender, Malwarebytes). If found, uninstall it completely using the vendor’s removal tool if available, then restart.
3. Enable Defender via Windows Security. Open Start, type “Windows Security,” and open it. Go to Virus & threat protection. If you see a yellow or red banner saying “Turn on,” click it. If the toggle is greyed out, continue to the next steps.
4. Run the Windows Defender Offline Scan. In Windows Security, under Virus & threat protection, click Scan options, then select Microsoft Defender Offline scan and click Scan now. This reboots your PC and scans for deeply embedded malware that might be blocking Defender.
5. Edit the Registry to re-enable Defender. Press Win + R, type regedit, and press Enter. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender. If you see a value named DisableAntiSpyware and its data is 1, double-click it and change the value to 0. If the value doesn’t exist, right-click in the right pane, select New → DWORD (32-bit) Value, name it DisableAntiSpyware, and set it to 0. Close the Registry Editor and restart.
6. Check Group Policy settings (Windows Pro/Enterprise only). Press Win + R, type gpedit.msc, and press Enter. Navigate to Computer Configuration → Administrative Templates → Windows Components → Microsoft Defender Antivirus. Double-click Turn off Microsoft Defender Antivirus, set it to Not Configured or Disabled, and click OK. Repeat for any policy under Real-time Protection that says “Turn off.” Then restart.
7. Run the System File Checker (SFC). Open Command Prompt as administrator (right-click Start → Terminal (Admin) or Command Prompt (Admin)). Type sfc /scannow and press Enter. Wait for the scan to complete (it can take 10–15 minutes). If it finds errors, restart and run it again.
8. Use DISM to repair the system image. In the same admin terminal, type DISM /Online /Cleanup-Image /RestoreHealth and press Enter. This can take 20 minutes or more. After it finishes, restart and run sfc /scannow again.
9. Reset Windows Security app. Go to Settings → Apps → Installed apps, find Windows Security, click the three-dot menu, choose Advanced options, then click Reset. Confirm and restart.
10. Update Windows. Go to Settings → Windows Update and click Check for updates. Install all pending updates, then restart. Updates often fix known Defender bugs.

Common Mistakes

• Not uninstalling third-party AV completely. Simply disabling it isn’t enough; Windows still sees it and keeps Defender off. Use the vendor’s official removal tool after uninstalling.
• Editing the wrong registry key. The path must be exactly HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender. A typo can cause the setting to be ignored.
• Skipping the restart. Many changes only take effect after a full restart, not just a shutdown and boot (which uses fast startup). Use Restart from the Start menu.
• Assuming Group Policy doesn’t apply to Home editions. Windows Home doesn’t have gpedit.msc, so skip that step if you’re on Home.

Tips

• Use the Microsoft Safety Scanner. If Defender won’t turn on, download and run the standalone Microsoft Safety Scanner from the official Microsoft website. It can remove malware that’s blocking Defender.
• Check for tamper protection. In Windows Security, go to Virus & threat protection → Manage settings. If Tamper Protection is off, turn it on—it prevents malware from disabling Defender.
• Create a restore point before making registry changes. This lets you revert if something goes wrong.
• Keep Windows updated. Defender relies on regular definition updates. Set Windows Update to automatic.

Troubleshooting

If the steps above don’t work, try these additional approaches:

• Check the Defender service. Press Win + R, type services.msc, and find Windows Defender Antivirus Service (or WinDefend). Make sure its status is Running and startup type is Automatic. If not, right-click → Properties and set it accordingly, then start it.
• Use the Windows Defender Troubleshooter. Microsoft provides a dedicated troubleshooter for Defender. Download it from the official Microsoft support site and run it—it automatically detects and fixes common issues.
• Perform a clean boot. Some third-party services may interfere. Type msconfig in Run, go to Services, check Hide all Microsoft services, click Disable all, then restart. If Defender turns on, re-enable services one by one to find the culprit.
• Reset Windows (last resort). If nothing works, back up your files and use Settings → System → Recovery → Reset this PC. Choose Keep my files to reinstall Windows without losing personal data. This will definitely restore Defender.

Frequently Asked Questions

Why does Windows Defender keep turning off by itself?

This usually happens because another antivirus is installed (even a trial), a Group Policy or registry setting disables it, or malware is actively blocking it. Follow the steps above to eliminate each cause.

Can I force-enable Defender via the registry?

Yes, but only if the DisableAntiSpyware value is set to 1. Setting it to 0 or deleting it can re-enable Defender. However, if the value isn’t there, creating it with 0 won’t hurt but may not help if the issue is a third-party AV.

Is it safe to run two antivirus programs at once?

No. Running two real-time antivirus programs causes conflicts, slows down your PC, and can make both less effective. Windows automatically disables Defender when another AV is active—that’s by design.

What if I don’t have the Group Policy editor (gpedit.msc)?

Windows Home editions don’t include Group Policy. Skip that step and rely on the registry fix, SFC, and DISM. You can also use the Windows Defender Troubleshooter.

Will resetting Windows delete my files?

If you choose Keep my files, your personal files (documents, photos, etc.) are preserved, but installed apps and settings will be removed. You’ll need to reinstall your programs afterward.

How do I know if Defender is actually working?

Open Windows Security → Virus & threat protection. If you see a green checkmark and “No actions needed,” Defender is active. You can also run a quick scan to confirm.

Related

• How to Close Apps on iPad (All Models)
• Alt Tab Not Working on Windows 11? Top Fixes
• Fix: Microsoft Edge Uninstall Greyed Out