How to Resolve Windows Defender “This App is Turned Off by Group Policy” Error in Windows PC

  • Windows Defender “This application is disabled by group policy” error is a pop-up notification specific to Windows 10.
  • In recent versions of Windows, Windows Defender is installed by default.
  • This built-in security suite is enough to provide basic protection for your PC and keep you safe online.
  • If your computer is part of a domain and the domain controller has assigned certain policies, the error may be blocked.

 

Unlock the secrets of resolving the Windows Defender Turned Off by Group Policy Error with ease in this enlightening article.

Check for group policy settings: Open the Group Policy Editor by typing “gpedit.msc” in the Run dialog box (Win + R). Navigate to “Computer Configuration” > “Administrative Templates” > “Windows Components” > “Windows Defender Antivirus.” Ensure that “Turn off Windows Defender Antivirus” policy is set to “Not Configured” or “Disabled.

Enabling Windows Defender through Group Policy

To enable Windows Defender through Group Policy and fix the “Windows Defender Turned Off by Group Policy Error,” follow these steps:

1. Open the Local Group Policy Editor by pressing Windows Key + R, typing “gpedit.msc,” and hitting Enter.

2. In the Group Policy Editor, navigate to “Computer Configuration” > “Administrative Templates” > “Windows Components” > “Windows Defender.”

3. On the right-hand side, double-click on the policy named “Turn off Windows Defender.”

4. Select the “Disabled” option and click “OK” to enable Windows Defender.

5. Restart your computer to apply the changes.

By enabling Windows Defender through Group Policy, you ensure that the Defender error caused by Group Policy is resolved. This method is particularly helpful in scenarios where third-party antivirus solutions or incompatibility issues are the culprits. Remember to consult with your system administrator or domain controller before making any changes to Group Policy settings.

Removing Conflicting Anti-Malware Software

To fix the “Windows Defender Turned Off by Group Policy” error, you may need to remove any conflicting anti-malware software from your computer. Here’s how:

1. Open the Start menu and search for “Control Panel”. Open the Control Panel app.
2. In the Control Panel, search for “Programs” and click on “Uninstall a program” under the “Programs” category.
3. Look for any third-party antivirus or anti-malware software installed on your computer. Right-click on the software and select “Uninstall” to remove it from your system.
4. Restart your computer to complete the uninstallation process.

If the error persists, you can also try disabling conflicting software using the Local Group Policy Editor:

1. Open the Start menu and search for “gpedit.msc”. Open the Local Group Policy Editor.
2. In the Group Policy Editor, navigate to “Computer Configuration” > “Administrative Templates” > “Windows Components” > “Windows Defender Antivirus”.
3. Double-click on “Turn off Windows Defender Antivirus” and select “Enabled”.
4. Click “Apply” and “OK” to save the changes.
5. Restart your computer to apply the new policy settings.

By removing conflicting anti-malware software or disabling it through the Group Policy Editor, you can resolve the “Windows Defender Turned Off by Group Policy” error and ensure your computer is protected against cyberattacks.

Restarting Security Center Service

To restart the Security Center service and fix the “Windows Defender Turned Off by Group Policy” error, follow these steps:

Step 1: Press the Windows key + R to open the Run dialog box.

Step 2: Type “services.msc” and press Enter to open the Services window.

Step 3: Scroll down and locate the “Security Center” service.

Step 4: Right-click on the “Security Center” service and select “Restart” from the context menu.

Step 5: Wait for the service to restart, then close the Services window.

Step 6: Check if the “Windows Defender Turned Off by Group Policy” error is resolved.

In some cases, you may also need to check your group policies. To do this, follow these additional steps:

Step 1: Press the Windows key + R to open the Run dialog box.

Step 2: Type “gpedit.msc” and press Enter to open the Group Policy Editor.

Step 3: Navigate to “Computer Configuration” > “Administrative Templates” > “Windows Components” > “Windows Defender Antivirus”.

Step 4: Double-click on “Turn off Windows Defender Antivirus” policy.

Step 5: Select “Not Configured” or “Disabled” to enable Windows Defender.

Step 6: Click “Apply” and then “OK” to save the changes.

python
import subprocess

def enable_windows_defender():
try:
subprocess.run(['powershell', '-command', 'Set-MpPreference -DisableRealtimeMonitoring $false'], check=True)
print("Windows Defender has been enabled.")
except subprocess.CalledProcessError as e:
print("Failed to enable Windows Defender:", e)

# Calling the function to enable Windows Defender
enable_windows_defender()

This code snippet utilizes PowerShell commands to enable Windows Defender’s real-time monitoring. It uses the `subprocess.run` method to execute the PowerShell command `Set-MpPreference -DisableRealtimeMonitoring $false`. If successful, it prints a success message; otherwise, it prints a failure message along with the error details.

Please note that this code assumes you have administrative privileges and that your system’s group policies allow enabling Windows Defender.

Modifying Registry to Enable Windows Defender

To fix the “Windows Defender Turned Off by Group Policy Error,” you can modify the registry settings. Follow these steps:

1. Press the Windows key + R to open the Run dialog box.
2. Type “regedit” and press Enter to open the Registry Editor.
3. Navigate to the following directory: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender.
4. Look for a DWORD value named “DisableAntiSpyware” in the right-hand pane.
5. Double-click on “DisableAntiSpyware” and change the value data to “0” (zero).
6. Click OK to save the changes.
7. Restart your computer to apply the modifications.

By modifying the registry, you can enable Windows Defender and resolve the Group Policy error. It’s important to note that modifying the registry carries some risks, so proceed with caution and back up your registry before making any changes.

Reviewing and Deleting Conflicting Registry Entries

  1. Open the Registry Editor by pressing Win + R to open the Run dialog box, type regedit, and press Enter.
  2. Navigate to the following key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
  3. Check if there are any subkeys or entries under the Windows Defender key.
  4. If there are any subkeys or entries, right-click on them one by one and select Delete to remove them.
  5. Repeat the previous step for any other conflicting registry keys or entries related to Windows Defender in the following locations:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Defender
    HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Windows Defender
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows Defender
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows Defender
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend
  6. Close the Registry Editor.
    If there are any subkeys or entries, right-click on them one by one and select Delete to remove them.
Close the Registry Editor.

Uninstalling Third-Party Antivirus Tools

To fix the “Windows Defender Turned Off by Group Policy Error” issue, you may need to uninstall any third-party antivirus tools that are causing conflicts. Here’s how:

1. Open the Control Panel on your Windows computer.

2. Click on “Programs” or “Programs and Features” to access the list of installed software.

3. Look for any third-party antivirus tools that are currently installed. Examples include McAfee, Norton, or Avast.

4. Right-click on the antivirus software and select “Uninstall” from the context menu. Follow the on-screen prompts to complete the uninstallation process.

5. Restart your computer to ensure that the changes take effect.

After uninstalling the third-party antivirus software, Windows Defender should be able to turn on without any issues. It’s important to note that Windows Defender is a built-in security feature in Windows 10, Windows 8, and Windows 7, so there’s no need to install a separate antivirus program.

If you continue to experience problems with Windows Defender or encounter any other issues, please refer to Microsoft’s official support documentation or consult with a system administrator for further assistance.

Disabling Group Policy Settings

To disable Group Policy settings and fix the “Windows Defender Turned Off by Group Policy Error,” follow these steps:

1. Press the Windows key + R to open the Run dialog box.
2. Type “gpedit.msc” and press Enter to open the Local Group Policy Editor.
3. In the Group Policy Editor, navigate to “Computer Configuration” > “Administrative Templates” > “Windows Components” > “Windows Defender Antivirus.”
4. Double-click on the “Turn off Windows Defender Antivirus” policy.
5. Select the “Enabled” option and click OK to save the changes.
6. Close the Group Policy Editor and restart your computer.

Note: Disabling Windows Defender may leave your computer vulnerable to cyberattacks. Use this method only if you have another reliable security suite installed.

If the Group Policy method doesn’t work, you can also try editing the Windows Registry. However, be cautious when modifying the registry, as it can cause serious problems if not done correctly.

Checking Microsoft Defender Service Status




Fix Windows Defender Turned Off by Group Policy Error


Fix Windows Defender Turned Off by Group Policy Error

Checking Microsoft Defender Service Status

Service Name Status
Windows Defender Running
Windows Security Center Running
Windows Update Running

If you encounter the “Windows Defender Turned Off by Group Policy” error, it is important to verify the status of the Microsoft Defender service and related services. Make sure that the services listed above are running. If any of them are not running, you may need to troubleshoot or restart the respective service to enable Windows Defender.


Website | + posts

Mark Ginter is a tech blogger with a passion for all things gadgets and gizmos. A self-proclaimed "geek", Mark has been blogging about technology for over 15 years. His blog, techquack.com, covers a wide range of topics including new product releases, industry news, and tips and tricks for getting the most out of your devices. If you're looking for someone who can keep you up-to-date with all the latest tech news and developments, then be sure to follow him over at Microsoft.