How to stop Windows Defender "Real Time Protection" from enabling itself

Discussion in 'Windows 10' started by TrustMe, Jun 14, 2018.

  1. pf100

    pf100 Duct Tape Coder

    Oct 22, 2010
    2,069
    3,449
    90
    By itself, that doesn't work for a long time now. Windows 10 Update Assistant doesn't need Windows Update service (wuauserv) running to update Windows 10.
     
  2. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream

    Dec 21, 2012
    6,358
    7,077
    210
    Anything could run updates without that service, as the DISM tool doesn't need it for CABs.
     
  3. colinzim

    colinzim MDL Senior Member

    May 14, 2007
    461
    114
    10
    another method, cmd as admin >gpedit.msc
     
  4. bay12

    bay12 MDL Junior Member

    Nov 30, 2014
    84
    13
    0
    Hi all,
    does all the scripts posted on page 1 stop also the smartscreen.exe process of windows 1809?

    thanks
     
  5. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,172
    1,055
    60
    Smartscreen is another issue/challenge. I use this:
    Code:
    takeown /f "%WinDir%\System32\smartscreen.exe" /a
    icacls "%WinDir%\System32\smartscreen.exe" /grant:r Administrators:F /c
    taskkill /im smartscreen.exe /f
    del "%WinDir%\System32\smartscreen.exe" /s /f /q
     
  6. bay12

    bay12 MDL Junior Member

    Nov 30, 2014
    84
    13
    0
    For now I'm using the same method but I'm looking to a more "clean" solution to disable it. With this method "sfc /verifyonly" will find integrity problems.
     
  7. Ruky

    Ruky MDL Novice

    Dec 20, 2018
    19
    1
    0
    I have EnterpriseS LTSC version, new .195 update. Managed to disable windows defender, but windows defender firewall service (mpssvc) i can't disable (it's listed in services list, fixed in automatic mode). Also i disabled security center and now i can't disable notifications about disabled security center ???
     
  8. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,172
    1,055
    60
    Via registry, you can also disable "Base Filtering Engine". If you disable "Network Store Interface Service", it will also disable WDF.
    Code:
    reg add "HKLM\System\CurrentControlSet\Services\MpsSvc" /v "Start" /t REG_DWORD /d "4" /f
    Code:
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_TOASTS_ENABLED" /t REG_DWORD /d "0" /f
    You can also enable security center and disable all security messages, then disable it again.
     

    Attached Files:

  9. Krager

    Krager MDL Senior Member

    Jan 9, 2017
    396
    233
    10
  10. Ruky

    Ruky MDL Novice

    Dec 20, 2018
    19
    1
    0
    OK. Base filtering engine and firewall are dead. But i had to enable security center to avoid popups from Notifications & Actions, security and maintenance banners are grey (fixed turned on) TOASTS reg setting didn't help. In security center i also don't see option to disable notifications