Updated 20 October 2026.
If Microsoft Defender blocks an app or seems busy, first find out why. Permanently disabling antivirus with a one-click utility can leave downloads and other files unchecked. Windows already includes controls for reviewing detections and, when necessary, making a short, deliberate troubleshooting change.
Check the problem before changing protection
| Problem | Useful first step |
|---|---|
| An app is blocked | Read the detection name and affected file in Protection history. |
| A download will not run | Confirm the publisher and obtain the genuine installer. |
| The PC feels slow | Check the active process and whether a scan is still running. |
| Another antivirus is installed | Check which product Windows lists as the active provider. |
Do not treat a missing DLL, damaged installer or compatibility error as proof that antivirus must be switched off. Our guide to repairing missing DLL errors covers repairs through the original application and Microsoft components.
Where the temporary switch is
On a supported Windows installation, open Windows Security > Virus & threat protection > Manage settings. If the device allows it, the Real-time protection switch can be turned off temporarily. An administrator prompt may appear.
Microsoft’s Defender settings documentation says real-time protection turns back on after a short delay. Do not rely on that delay: re-enable it yourself as soon as the troubleshooting step is finished. Avoid opening unrelated files or browsing for downloads while protection is off.
Prefer a targeted repair to a permanent workaround
If you believe a file was wrongly detected, verify it with its developer and use Microsoft’s official submission process where appropriate. Exclusions and restored quarantined files reduce what is checked; they deserve the same care as turning protection off.
Keep Windows and security intelligence updated. A publisher may already have a corrected installer, and a failed installation may be resolved by its repair option. Change one setting at a time so you know which action affected the problem.
What happens with another antivirus?
On ordinary client PCs, a compatible third-party antivirus can take over protection, with Defender’s operating state adjusting accordingly. Managed business devices can behave differently. Check the active provider rather than assuming every Microsoft security feature has stopped.
Microsoft’s antivirus FAQ explains provider changes and why protection may return when another product expires or is removed. Do not stack disable utilities on top of an antivirus installation.
Check protection afterwards
- Turn real-time protection back on if you changed it.
- Check the active antivirus provider and outstanding warnings.
- Remove any temporary exclusions you no longer need.
- Run a scan if you opened a questionable file.
If settings are controlled by your organization, contact its administrator. Bypassing those controls is unlikely to solve the underlying support issue.
FAQs
Why does Defender turn itself back on?
Temporary real-time protection changes are designed to expire. Another antivirus becoming unavailable can also change the active protection state.
Should I use a Defender disable tool?
Use the documented Windows controls and repair the underlying problem. A permanent disable utility adds an unnecessary dependency.
Is an exclusion safer than switching everything off?
It is narrower, but excluded files still receive less protection. Use one only when justified and remove it afterwards.
Why is the switch unavailable?
Your account, device management or security configuration may restrict it. Check with the administrator rather than forcing a bypass.