How to Fix Windows Defender Not Working or Turned Off

•
PC Technician
Windows 11SecurityFixTroubleshooting

The Problem

Windows Security warns that virus protection is off, or the toggle snaps back to disabled after you turn it on. Sometimes a second antivirus left drivers behind; sometimes malware turned Defender off on purpose. A few minutes in Services and Settings beats reinstalling Windows on the first try.

Active infection suspected? After Defender runs again, follow remove virus or malware for a full offline scan.

Symptoms

  • Yellow banner: Virus & threat protection is turned off.
  • Turn on button grayed out or flips off after reboot.
  • Third-party AV expired but still hooks into the system.
  • This app has been turned off and isn't monitoring your PC in Security Center.

The Fix: Step-by-Step

Step 1: Remove Conflicting Antivirus

  1. Settings → Apps → Installed apps → uninstall old Norton, McAfee, Avast, Kaspersky, etc.
  2. Download the vendor's removal tool from their support site if uninstall leaves drivers (search "McAfee removal tool," "Norton remove and reinstall," etc.).
  3. Reboot before testing Defender again.

Step 2: Turn Defender On in Settings

  1. Settings → Privacy & security → Windows Security → Virus & threat protection.
  2. Under Virus & threat protection settings, click Manage settings → enable Real-time protection.
  3. Enable Tamper Protection so malware cannot silently disable Defender again.

Step 3: Start Required Services

  1. Win + R → services.msc → Enter.
  2. Find Microsoft Defender Antivirus Service → Startup type: Automatic → Start.
  3. Also set Automatic and start:
    • Windows Security Service
    • Security Center (legacy name; still used for notifications)
  4. Reboot.

Step 4: Check Group Policy (Pro/Enterprise)

  1. Win + R → gpedit.msc → Computer Configuration → Administrative Templates → Windows Components → Microsoft Defender Antivirus.
  2. Turn off Microsoft Defender Antivirus → Not Configured or Disabled (wording means "do not disable Defender").
  3. Run gpupdate /force in an admin terminal and reboot.

Home edition: skip gpedit; check Settings → Privacy & security → Windows Security → Open app for any enterprise enrollment message.

Step 5: Repair With PowerShell (Admin)

Open Terminal (Admin):

Get-AppxPackage Microsoft.SecHealthUI -AllUsers | Reset-AppxPackage

Reopen Windows Security from the Start menu. If the app was corrupted, the UI returns.

Step 6: Run Defender Troubleshooter

Settings → System → Troubleshoot → Other troubleshooters → Windows Update (sometimes fixes Security components) or search Microsoft Support for Windows Security troubleshooter.

Step 7: Full Offline Scan Once Defender Works

Virus & threat protection → Scan options → Microsoft Defender Antivirus (offline scan). Malware that disabled Defender often gets caught here.

Still Off After All Steps?