Turn off defender in 22H2..??

Discussion in 'Windows 10' started by Rickkins, Sep 18, 2023.

  1. acer-5100

    acer-5100 MDL Guru

    Dec 8, 2018
    4,003
    2,925
    150
  2. Rickkins

    Rickkins MDL Senior Member

    Jul 29, 2009
    439
    102
    10
    Success, thanks for the help...
     
  3. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    4,189
    6,018
    150
    it can be disabled ..
    but it has become harder to shut down the main service now
    but even if this service works, the other service shuts down
    and the other registry tweaks kill it ..
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. Dude Guyman

    Dude Guyman MDL Senior Member

    Jun 20, 2017
    340
    352
    10
    Nothing is going to happen, other than registry settings will go from "on" to "off", and Defender will (should) be disabled, after a reboot. It does not uninstall Defender or anything, pretty sure that would cause all sorts of random problems. It's just a one click way to do all the settings that would be done in gpedit.msc.
    gpedit.jpg
     
  5. JLBENEDICT

    JLBENEDICT MDL Junior Member

    Dec 5, 2013
    81
    48
    0
    Microsoft has waged war against us with their consumer OS's with unneeded applications, bloat, telemetry, etc... Do not give up the fight!
    :D
     
  6. duster340

    duster340 MDL Junior Member

    Jan 20, 2022
    89
    22
    0
    This is how I got rid of it.
    How do I force Uninstall Windows Defender?
    Open Start. Search for gpedit.msc and click the top result to open the Local Group Policy Editor. Browse the following path: Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus. Double-click the "Turn off Microsoft Defender Antivirus" policy.
     
  7. acer-5100

    acer-5100 MDL Guru

    Dec 8, 2018
    4,003
    2,925
    150

    This is disable not uninstall.

    To uninstall

    https://forums.mydigitallife.net/threads/turn-off-defender-in-22h2.87471/#post-1806404
     
  8. duster340

    duster340 MDL Junior Member

    Jan 20, 2022
    89
    22
    0
    Sorry acer-5100 but I'm not nor due I think one can uninstall it? At least for me I thought disabling it was goon enough for moi. Your link I saw yesterday and thought way too much trouble imho. Accept my apologies! ;)
     
  9. acer-5100

    acer-5100 MDL Guru

    Dec 8, 2018
    4,003
    2,925
    150
    I didn't say isn't enough

    I just replied to your message "How do I force Uninstall Windows Defender?", and pointed out that uninstalling is a different thing.

    That's all
     
  10. Ace2

    Ace2 MDL Expert

    Oct 10, 2014
    1,892
    1,568
    60
    #31 Ace2, Sep 29, 2023
    Last edited: Oct 2, 2023
    Info removed because if used will break CU updates.;)
    Credit xinso for letting me know.
     
  11. atgpud2003

    atgpud2003 MDL Addicted

    Apr 30, 2015
    631
    111
    30
    Or use Win AeroTweaker it works for me from Windows 10 (HOME, PRO, PRO for WS, Enterprise, LTSC and IoT LTSC [21H2 and 22H2] )

    ATGPUD2003
     
  12. acer-5100

    acer-5100 MDL Guru

    Dec 8, 2018
    4,003
    2,925
    150

    Or read the previous messages instead of repeating what was already said. ;)
     
  13. acforall

    acforall MDL Novice

    Aug 25, 2016
    9
    1
    0
    Will manually installing CU work if defender is removed?
     
  14. acer-5100

    acer-5100 MDL Guru

    Dec 8, 2018
    4,003
    2,925
    150
    Updates used to be not affected by defender properly removed using dism, not 100% sure it's still the case
     
  15. acer-5100

    acer-5100 MDL Guru

    Dec 8, 2018
    4,003
    2,925
    150

    Why use a random SW when you can remove it as MS intended to?

    Just don't use a cruise missile when a slingshot can do the job (almost surely a better job).
     
  16. hundreAd

    hundreAd MDL Novice

    Apr 24, 2018
    1
    0
    0
    does NOT work on 22H2!
    UNLESS tamper protection is disabled

    p.s. in pure batch file (run as admin):
    Code:
      setlocal enabledelayedexpansion
      call :removepackage Windows-Defender
      call :removepackage Microsoft-Windows-SenseClient
    
    removepackage:
    Code:
    :removepackage (
      setlocal
      set "key=HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages"
      for /f "tokens=*" %%i in ('reg query "!key!" /f "%~1" /k 2^>nul ^| findstr /i /c:"!key!"') do (
        reg add "%%~i" /v "Visibility" /d 1 /t REG_DWORD /f 1>nul 2>nul
        reg add "%%~i" /v "DefVis" /d 2 /t REG_DWORD /f 1>nul 2>nul
        reg delete "%%~i\Owners" /f 1>nul 2>nul
    
        for /f "delims=\ tokens=8" %%i in ("%%~i") do set "x=%%~i"
        DISM.exe /Online /Remove-Package /PackageName:"!x!" /NoRestart 1>nul 2>nul
      )
      endlocal
      goto :eof
    )
    
    when running dism without the >nul the error "access is denied" can be seen (again, due to tamper protection)
     
  17. Dude Guyman

    Dude Guyman MDL Senior Member

    Jun 20, 2017
    340
    352
    10
    #40 Dude Guyman, Oct 23, 2024
    Last edited: Oct 25, 2024
    Hmmm. Interesting. I gave this a try, cause why not, and it seems to have done the job and so far no side effects or crazy Event Viewer spam.
    I had to do a bit (lot) of searching to find "install_wim_tweak.exe" (v1.4.7.0). Is there an "official source" for that that I missed? I found a lot of dead links and links to forum posts to other forum posts, etc.

    Edit: Started getting this in event viewer (safe to ignore I'm sure, but event viewer spam is a pet peeve of mine):
    The server {DDCFD26B-FEED-44CD-B71D-79487D2E5E5A} did not register with DCOM within the required timeout.