Forum Discussion
Solved
Windows 11 Defender not responding at all - No online solutions working.
Hello all! This is my first post on here, so i am sorry if i maybe mess something up with the formatting or so. But i have been having an issue ever since i got Windows 11 for my Surface Pro 4, whic...
I have finally (!) resolved the issue. However, i was forced to do a reset of my system. It seems to be working reliably now, even after a restart. Hopefully this problem does not reappear. I honestly think ill sell my Surface Pro if it does - It's just not worth spending so much time for.
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
That's the Registry-Editor's path of control by Group Policy.
If not already there, select on Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft and rightclick on it, select NEW, select KEY and name it Windows Defender. What you put in there as config, will be enforced without the need of opening the Windows Defender itself.
I don't know how familiar you are with Registry, but I give you here a compilation of settings that I use on an extreme turning off configuration. Uhm. I will delete as many keys possible that are not required for your intention. Please always look up what a key does, Google or check the
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
values in
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender
coz that's the exact path for your Windows Defender on currently active settings.
So, this is what I enforced for real time protection:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection]
"DisableRealtimeMonitoring"=dword:00000001
"DisableIOAVProtection"=dword:00000001
"DisableOnAccessProtection"=dword:00000001
"DisableBehaviorMonitoring"=dword:00000001
"DisableScriptScanning"=dword:00000001
"DisableRawWriteNotification"=dword:00000001
"DisableScanOnRealtimeEnable"=dword:00000001
"LocalSettingOverrideDisableRealtimeMonitoring"=dword:00000000
"LocalSettingOverrideDisableBehaviorMonitoring"=dword:00000000
"LocalSettingOverrideDisableIOAVProtection"=dword:00000000
"LocalSettingOverrideRealtimeScanDirection"=dword:00000000
"LocalSettingOverrideDisableOnAccessProtection"=dword:00000000
"RealtimeScanDirection"=dword:00000002
"IOAVMaxSize"=dword:00000001
That's the Registry-Editor's path of control by Group Policy.
If not already there, select on Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft and rightclick on it, select NEW, select KEY and name it Windows Defender. What you put in there as config, will be enforced without the need of opening the Windows Defender itself.
I don't know how familiar you are with Registry, but I give you here a compilation of settings that I use on an extreme turning off configuration. Uhm. I will delete as many keys possible that are not required for your intention. Please always look up what a key does, Google or check the
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
values in
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender
coz that's the exact path for your Windows Defender on currently active settings.
So, this is what I enforced for real time protection:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection]
"DisableRealtimeMonitoring"=dword:00000001
"DisableIOAVProtection"=dword:00000001
"DisableOnAccessProtection"=dword:00000001
"DisableBehaviorMonitoring"=dword:00000001
"DisableScriptScanning"=dword:00000001
"DisableRawWriteNotification"=dword:00000001
"DisableScanOnRealtimeEnable"=dword:00000001
"LocalSettingOverrideDisableRealtimeMonitoring"=dword:00000000
"LocalSettingOverrideDisableBehaviorMonitoring"=dword:00000000
"LocalSettingOverrideDisableIOAVProtection"=dword:00000000
"LocalSettingOverrideRealtimeScanDirection"=dword:00000000
"LocalSettingOverrideDisableOnAccessProtection"=dword:00000000
"RealtimeScanDirection"=dword:00000002
"IOAVMaxSize"=dword:00000001