Microsoft Defender is built into Windows 10 and Windows 11, but it does not always behave as expected.
This guide explains how to fix Microsoft Defender not working by checking the most common causes, from disabled services to policy conflicts and corrupted Windows security components.
Why Microsoft Defender Stops Working
Microsoft Defender can fail for several reasons, and the exact symptom matters.
It may refuse to open, show a blank Windows Security screen, stop real-time protection, fail to update security intelligence, or report that another antivirus product is controlling protection.
The most common causes include:
- Third-party antivirus software disabling Defender
- Corrupted Windows Security or Defender files
- Disabled background services
- Incorrect Group Policy or registry settings
- Damaged Windows updates or system files
- Microsoft Defender being turned off by a work or school device policy
Check Whether Another Antivirus Is Installed
Windows generally disables Microsoft Defender real-time protection when another antivirus app is active.
If you recently installed Norton, McAfee, Bitdefender, Avast, Kaspersky, or similar software, Defender may be functioning as designed rather than broken.
What to do
- Open Settings and review installed apps.
- Check the system tray for security software running in the background.
- Fully uninstall any third-party antivirus you no longer want to use.
- Restart the PC after removal, then recheck Windows Security.
Some security products leave behind drivers or services after uninstalling.
If Defender still will not re-enable, use the vendor’s official removal tool before troubleshooting further.
Restart Core Windows Security Services
Microsoft Defender relies on Windows services to launch properly and keep protection active.
If these services are stopped or set incorrectly, Windows Security may open but show errors, or it may not open at all.
Services to verify
- Microsoft Defender Antivirus Service
- Security Center
- Windows Security Service on supported builds
How to check them
- Press Windows + R, type services.msc, and press Enter.
- Find the relevant service.
- Make sure the startup type is set to Automatic or Automatic (Delayed Start) when available.
- Right-click the service and choose Restart.
If a service will not start, note the error message.
That often points to corrupted files or a policy restriction that must be fixed next.
Run Windows Security Troubleshooter and Update Windows
Outdated Windows builds often break Defender components, especially after major updates or security definition changes.
Before changing advanced settings, update the operating system and run built-in troubleshooting tools.
Steps to take
- Go to Settings > Windows Update.
- Install all available cumulative updates.
- Restart the computer even if Windows does not prompt you immediately.
- Open Settings > System > Troubleshoot > Other troubleshooters and run any security-related or Windows Update troubleshooters available on your version.
Windows Update also refreshes Defender platform files and can repair components that standard scans do not touch.
Repair or Reset the Windows Security App
If the Windows Security interface is broken, Microsoft Defender may still be active in the background, but you will not be able to manage it properly.
A repair or reset often fixes empty pages, missing buttons, and settings that refuse to save.
How to repair it
- Open Settings.
- Go to Apps > Installed apps.
- Search for Windows Security.
- Open Advanced options.
- Choose Repair.
If repair does not help, use Reset.
A reset may clear app data, but it is a standard fix for a broken Windows Security interface.
Scan for Corrupted System Files
Corrupted Windows system files can prevent Microsoft Defender from loading its services, opening the security dashboard, or downloading updates.
The best built-in repair tools are System File Checker and Deployment Imaging Service and Management Tool.
Run these commands in Terminal as administrator
sfc /scannowDISM /Online /Cleanup-Image /RestoreHealthRun sfc /scannow first, then use DISM if problems remain.
Restart the PC afterward and test Microsoft Defender again.
On many systems, this resolves hidden corruption affecting Windows Security and related Defender components.
Check Group Policy and Registry Restrictions
On managed devices, Microsoft Defender may be disabled by policy.
This is common in business environments using Active Directory, Microsoft Intune, or other endpoint management tools.
It can also happen on personal PCs if a policy was set manually or by optimization software.
Important policy areas
- Turn off Microsoft Defender Antivirus
- Real-time protection settings
- Cloud-delivered protection restrictions
- Tamper Protection-related controls
If you are on a home PC and not using enterprise management, check whether registry edits or third-party “debloat” tools changed Defender settings.
Reversing those changes may restore normal operation.
Be careful when editing the registry.
Create a restore point first, and only change settings you can verify from a trusted Microsoft source or a known-good device policy.
Confirm Tamper Protection and Real-Time Protection
Microsoft introduced Tamper Protection to stop malicious software from disabling Defender.
However, if the feature or the underlying security settings are misconfigured, it can appear that Defender is broken.
What to verify in Windows Security
- Virus & threat protection is accessible
- Real-time protection is turned on
- Cloud-delivered protection is enabled
- Tamper Protection is on unless policy prevents changes
If the toggles immediately switch back off, that usually indicates policy enforcement, lingering antivirus software, or a malware infection interfering with security settings.
Run an Offline Scan if Malware Is Suspected
Some threats actively target Microsoft Defender to avoid detection.
If Defender settings keep changing, scans will not run, or the interface behaves unpredictably, use an offline scan from a clean Windows environment.
Use Microsoft Defender Offline scan
- Open Windows Security.
- Go to Virus & threat protection.
- Select Scan options.
- Choose Microsoft Defender Offline scan.
- Start the scan and let the computer restart.
This scan runs before many malicious processes can load, which makes it more effective than a standard scan when Defender appears compromised.
Reset Windows Security Components with PowerShell
In some cases, resetting the Windows Security app package can restore broken UI components.
This is useful when Defender services exist but the app itself fails to register correctly.
Typical repair approach
- Open PowerShell as administrator.
- Use Microsoft-approved app repair or re-registration methods for the Windows Security package.
- Restart and retest the app.
This step is best used after simpler fixes such as updates, service restarts, and SFC/DISM repairs.
If you are on a corporate device, check with IT before changing built-in security packages.
When to Use System Restore or Reset This PC
If Microsoft Defender stopped working after a driver install, registry tweak, or failed update, System Restore may roll the computer back to a known-good state.
This is often the fastest fix when the problem began recently and other repairs did not help.
Use Reset this PC only if:
- Defender remains broken after multiple repair attempts
- Windows Security will not open at all
- System files are badly damaged
- You suspect a persistent security compromise
Before resetting, back up personal files and note installed apps and licenses so you can restore the system cleanly afterward.
Quick Checklist for Fixing Microsoft Defender Not Working
- Remove any third-party antivirus software
- Restart Security Center and Defender-related services
- Install the latest Windows updates
- Repair or reset the Windows Security app
- Run SFC and DISM to repair system files
- Check Group Policy or registry restrictions
- Verify Tamper Protection and real-time protection
- Run Microsoft Defender Offline scan if malware is suspected
- Use System Restore if the issue started recently
These steps address the most common reasons Microsoft Defender stops working on Windows 10 and Windows 11, while also separating normal behavior from actual system damage or policy restrictions.