How Microsoft Defender works
Microsoft Defender, formerly Windows Defender, is Microsoft’s built-in antivirus and anti-malware protection for Windows 10 and Windows 11.
It can run in the background, scan files in real time, block threats, and integrate with Windows Security for centralized protection.
If Defender appears off, it is often because another antivirus app is installed, a policy setting changed, or a feature such as real-time protection was disabled.
The steps below explain how to turn on Microsoft Defender and confirm that it is actively protecting your PC.
Before you start
Check whether a third-party antivirus product is installed, because Windows usually disables Microsoft Defender’s real-time protection when another security suite takes over.
Also make sure you are signed in with an administrator account, since some security settings require elevated permissions.
- Confirm that Windows Security is available in Start.
- Check for another antivirus such as Norton, McAfee, Bitdefender, Avast, or Kaspersky.
- Install pending Windows updates if Security pages are missing or not opening.
How to turn on Microsoft Defender in Windows Security
The most direct way to enable Microsoft Defender is through the Windows Security app.
This is the standard interface for Microsoft Defender Antivirus, firewall controls, account protection, and device security.
Turn on real-time protection
- Open Start and search for Windows Security.
- Select Virus & threat protection.
- Under Virus & threat protection settings, select Manage settings.
- Switch Real-time protection to On.
If prompted by User Account Control, approve the change.
Real-time protection is the core feature that scans downloads, apps, and files as they are opened.
Enable cloud-delivered protection and automatic sample submission
For stronger detection, keep these options enabled in the same settings area:
- Cloud-delivered protection
- Automatic sample submission
Cloud-delivered protection helps Microsoft Defender identify newer threats using Microsoft’s cloud intelligence, while sample submission improves detection quality for suspicious files.
How to turn on Microsoft Defender if another antivirus is installed
When a third-party antivirus is active, Microsoft Defender may switch to passive mode or reduce its real-time protection.
In many cases, turning on Defender fully means removing the competing antivirus app.
- Open Settings > Apps > Installed apps in Windows 11, or Apps & features in Windows 10.
- Find the third-party antivirus program.
- Select Uninstall and follow the prompts.
- Restart your computer.
- Open Windows Security again and confirm that Microsoft Defender is active.
Some security products include cleanup tools that remove leftover drivers and services.
If Defender still does not activate after uninstalling the app, use the vendor’s removal tool and restart again.
How to verify that Microsoft Defender is on
After enabling protection, verify the status so you know the system is actually guarded.
Windows Security should show a healthy status for virus protection, firewall, and device security.
- Open Windows Security and look for green check icons or “No action needed.”
- Check Virus & threat protection for the current protection status.
- Run a quick scan to confirm scans work normally.
You can start a quick scan from Virus & threat protection by selecting Quick scan.
For a deeper check, choose Scan options and run a Full scan or Microsoft Defender Offline scan.
How to turn on Microsoft Defender using Group Policy
On some Windows Pro and Enterprise systems, Group Policy settings can disable Microsoft Defender.
If you manage the computer or have access to admin tools, check that Defender is not turned off by policy.
- Press Windows + R, type gpedit.msc, and press Enter.
- Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus.
- Open Turn off Microsoft Defender Antivirus.
- Set the policy to Not Configured or Disabled.
- Restart the PC or run gpupdate /force in Command Prompt as administrator.
If this policy is enabled, Windows may prevent Defender from turning back on through the normal Security app.
How to turn on Microsoft Defender with the registry
Registry-based changes can also disable Microsoft Defender.
Use this method carefully, because incorrect edits can affect system stability.
Create a restore point before making changes.
- Press Windows + R, type regedit, and press Enter.
- Navigate to HKEY_LOCAL_MACHINE\\SOFTWARE\Policies\Microsoft\Windows Defender.
- Look for a value named DisableAntiSpyware or similar policy keys.
- If present, set the value to 0 or delete the policy entry if it was added by software you removed.
- Restart Windows and check Windows Security again.
Modern Windows versions usually rely more on policy controls than direct registry toggles, but registry entries can still interfere on managed or previously modified systems.
Common reasons Microsoft Defender stays off
If you have followed the main steps and Defender still appears disabled, one of these issues is often responsible:
- Another antivirus is still installed or partially active.
- Group Policy or organization management is enforcing settings.
- Windows Security app corruption is blocking normal access.
- System files are damaged and need repair.
- Paused protection or tamper protection conflicts are preventing changes.
Repair Windows Security components
Try repairing the Windows Security app if pages do not load properly.
Open Settings > Apps > Installed apps, find Windows Security if available, and use Advanced options to repair or reset the app.
On some systems, a Windows update can also restore missing security components.
Run system file checks
Corrupted Windows files can stop Defender services from working correctly.
Open Command Prompt as administrator and run these commands:
- sfc /scannow
- DISM /Online /Cleanup-Image /RestoreHealth
After both commands finish, restart your PC and check the Defender status again.
How to open Microsoft Defender quickly
Knowing where to find Microsoft Defender makes it easier to check protection regularly.
These shortcuts work well on Windows 10 and Windows 11:
- Start > search Windows Security
- Settings > Privacy & security > Windows Security in Windows 11
- Settings > Update & Security > Windows Security in Windows 10
From there, you can manage virus protection, firewall settings, app and browser control, and device performance health.
Best practices after turning it on
Once you know how to turn on Microsoft Defender, keep it effective by using a few practical habits.
These steps help maintain strong protection without needing constant manual intervention.
- Keep real-time protection enabled.
- Allow automatic updates for Windows and security intelligence.
- Run a quick scan after downloading unfamiliar files.
- Review Virus & threat protection history for blocked items.
- Leave Tamper Protection on unless you have a specific administrative reason not to.
Microsoft Defender is most effective when Windows is updated, competing antivirus software is removed, and security settings are left intact.
That combination gives you built-in protection with minimal maintenance.