I Disabled Real Time Protection but Windows Defender Is still Running

edoWin11Forums · Jan 15, 2023

Hi, I disabled Real Time protection to install a "broken" Software. However even though Defender's Real Time Protection is off, I still get items being quarantined during installation. How can I actually disable Defender temporarily?

James · Jan 16, 2023

Hi there. Open powershell. Enter the following: Set-MpPreference -DisableRealtimeMonitoring $true. When finished, simply enter: Set-MpPreference -DisableRealtimeMonitoring $false

Wisewiz · Jan 16, 2023

edoWin11Forums said:
Hi, I disabled Real Time protection to install a "broken" Software. However even though Defender's Real Time Protection is off, I still get items being quarantined during installation. How can I actually disable Defender temporarily?

I haven't tried James's method, but my guess is that it won't work unless you turn off Tamper Protection first.

I'd suggest that you first try going into your Defender screen (Virus and threat protection) and disabling Tamper Protection, and then turning off real-time protection. If you don't turn off TP first, turning off real-time protection will be ineffective.

But if you go this route, be SURE to go back and change those settings when you're finished.

@James : Does the Power Shell method work with Tamper Protection ON?

James · Jan 16, 2023

You can also turn off internet if the program doesn’t rely on such. I haven’t tried the power shell method with fiddling with settings to turn off anything, so I’m assuming it works without Tamper Protection

imanlien2020 · Jan 16, 2023

edoWin11Forums said:
Hi, I disabled Real Time protection to install a "broken" Software. However even though Defender's Real Time Protection is off, I still get items being quarantined during installation. How can I actually disable Defender temporarily?

If you mean Modded Software, hey its a free world. I get the same issue. I have every setting and registry tweak done to rid defenders powerful grip. I use Avast Premiere Pro and it takes over defender for sure BUT, I say but because and I have had legit Owned software/files quarantined by some very deeply embedded part of Defender. Nothing shuts this off for me. I may try James tweak here and see what happens.

kelper · Jan 17, 2023

Not working for me...

PS C:\WINDOWS\system32> Set-MpPreference -DisableRealtimeMonitoring $true
Set-MpPreference : Operation failed with the following error: 0x800106ba. Operation: Set-MpPreference. Target:
DisableRealtimeMonitoring.
At line:1 char:1
+ Set-MpPreference -DisableRealtimeMonitoring $true
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Set-MpPreference],
CimException
+ FullyQualifiedErrorId : HRESULT 0x800106ba,Set-MpPreference

James · Jan 17, 2023

kelper said:
Not working for me...

PS C:\WINDOWS\system32> Set-MpPreference -DisableRealtimeMonitoring $true
Set-MpPreference : Operation failed with the following error: 0x800106ba. Operation: Set-MpPreference. Target:
DisableRealtimeMonitoring.
At line:1 char:1
+ Set-MpPreference -DisableRealtimeMonitoring $true
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Set-MpPreference],
CimException
+ FullyQualifiedErrorId : HRESULT 0x800106ba,Set-MpPreference

Must need to turn of Tamperprotectoon

kelper · Jan 17, 2023

Even as admin, I can't turn off Tamper Protection on Win 11 Pro. Need an IT Admin!

And I'm not allowed to edit the DWord here for TP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features

TairikuOkami · Jan 17, 2023

Note that it might be also blocked by smartscreen or by exploit protection, they work separately from Defender.

https://www.addictivetips.com/windows-tips/whitelist-apps-in-the-smartscreen-on-windows-10

https://www.addictivetips.com/windows-tips/exclude-an-app-from-exploit-protection-on-windows-10

Wisewiz · Jan 17, 2023

kelper said:
Even as admin, I can't turn off Tamper Protection on Win 11 Pro. Need an IT Admin!

Strange. Do you have another Anti-V program running alongside Defender?
I only ask that because I use both Malwarebytes and Defender, and although I can't recall ever trying to turn off TP before I installed MWB, it's certainly the case that currently I can turn off TP at will, with just my normal Administrator login.

kelper said:
And I'm not allowed to edit the DWord here for TP

You'll have to edit your permissions for that key. I'm sure @Brink has help for that here, if you need it.

Brink · Jan 17, 2023

Hello,

I'm afraid Tamper Protection can only be turned off via Windows Security below for security reasons. It will not allow any other method.

Turn On or Off Tamper Protection for Microsoft Defender Antivirus in Windows 11

This tutorial will show you how to turn on or off Tamper Protection for Microsoft Defender Antivirus settings in Windows 11. Microsoft Defender Antivirus is an antivirus software that is included in Windows 11 and can help protect your device from viruses, malware, and other threats. Tamper...

www.elevenforum.com

kelper · Jan 17, 2023

Wisewiz said:
Strange. Do you have another Anti-V program running alongside Defender?
I only ask that because I use both Malwarebytes and Defender, and although I can't recall ever trying to turn off TP before I installed MWB, it's certainly the case that currently I can turn off TP at will, with just my normal Administrator login.

Thanks. I use Webroot and Defender occasional scanning was off. When I turned it on, I was able to turn off Tamper Protection. But I did turn it back on. Anyway, it's all good to know.

Wisewiz · Jan 17, 2023

Great news!

SHIELD44 · Nov 3, 2024

kelper said:
Even as admin, I can't turn off Tamper Protection on Win 11 Pro. Need an IT Admin!

And I'm not allowed to edit the DWord here for TP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features

SHIELD44 · Nov 3, 2024

NO you Don't lol
I fixed it with OPPut system refresh Now Put it in the currant Help lol

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy

I really Hate when Microosft tells people Like this Like the CODE Expert that Now Blocked Explorer 10 patch So Reported Him and what he Put In the File to ask people for Money hel write a code and Unblock it .

In the New Defender he wrote In you Have to RESECT you're with a fresh Install If Windows this would meen you LOOSE everthing if you don't have a Back Up .. I Said to My BOSSS Can I SMACK HIM NOW it let his supervisor Just let him go from MS.

antspants · Nov 3, 2024

SHIELD44 said:
NO you Don't lol
I fixed it with OPPut system refresh Now Put it in the currant Help lol

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy

I really Hate when Microosft tells people Like this Like the CODE Expert that Now Blocked Explorer 10 patch So Reported Him and what he Put In the File to ask people for Money hel write a code and Unblock it .

In the New Defender he wrote In you Have to RESECT you're with a fresh Install If Windows this would meen you LOOSE everthing if you don't have a Back Up .. I Said to My BOSSS Can I SMACK HIM NOW it let his supervisor Just let him go from MS.
View attachment 115044 View attachment 115047

What? I quite honestly didn’t understand a word you said.

perimano · Feb 23, 2025

Wisewiz said:
I haven't tried James's method, but my guess is that it won't work unless you turn off Tamper Protection first.

I'd suggest that you first try going into your Defender screen (Virus and threat protection) and disabling Tamper Protection, and then turning off real-time protection. If you don't turn off TP first, turning off real-time protection will be ineffective.

But if you go this route, be SURE to go back and change those settings when you're finished.

You are a life saver. I was struggling with this issue. Right order is very important.

I Disabled Real Time Protection but Windows Defender Is still Running

Member

My Computer

Well-known member

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Well-known member

My Computers

EternalSoul

My Computer

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

Microsoft 365 Basic

My Computer

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Administrator

My Computers

Well-known member

My Computers

𝐒𝐩𝐞𝐚𝐤𝐬 𝐀𝐧𝐜𝐢𝐞𝐧𝐭 𝐆𝐞𝐞𝐤

My Computers

Member

My Computer

Member

My Computer

Like a rolling drone.

My Computers

New member

My Computer

Similar threads