How to Enable Windows Defender Real-Time Protection Properly

What Causes This?

Windows Defender real-time protection can turn off if another antivirus is installed, if a Group Policy or registry setting disables it, or if a Windows Security service is not running properly. It can also fail to stay on after malware changes security settings, after a broken Windows update, or when tamper protection blocks conflicting changes. In some cases, the toggle appears available but switches back off because Microsoft Defender Antivirus is being managed by another security product.

Common Symptoms

• The Real-time protection toggle in Windows Security is off or grayed out
• You turn it on, but it switches off again after a restart
• Windows shows messages like "This setting is managed by your administrator"
• Defender scans do not run, or threat protection warnings keep appearing
• Windows Security says another antivirus provider is active

How to Fix It Manually

1. Check whether another antivirus is installed

   1. Press Windows + I to open Settings
   2. Go to Apps > Installed apps
   3. Look for third-party antivirus tools such as Norton, McAfee, Avast, AVG, Bitdefender, or similar
   4. If you find one, uninstall it, then restart your PC
   5. After restarting, open Windows Security and check whether Defender real-time protection is available again

2. Turn on real-time protection in Windows Security

   1. Press Start, type Windows Security, and open it
   2. Click Virus & threat protection
   3. Under Virus & threat protection settings, click Manage settings
   4. Turn Real-time protection to On
   5. If prompted by User Account Control, click Yes

3. Make sure the required Defender service is running

   1. Press Windows + R, type services.msc, and press Enter
   2. Find Microsoft Defender Antivirus Service
   3. Double-click it and check the Startup type
   4. If available, set it to Automatic
   5. If the service is stopped, click Start
   6. Click Apply, then OK
      Note: On some systems, service options may be limited if Defender is managed by Windows.

4. Check for policy settings that disable Defender

   1. Press Windows + R, type gpedit.msc, and press Enter
      If this does not open, your edition of Windows may not include Group Policy Editor.
   2. Go to:
      Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus
   3. Open Turn off Microsoft Defender Antivirus
   4. Set it to Not Configured or Disabled
   5. Then go to Real-time Protection
   6. Open Turn off real-time protection and set it to Not Configured
   7. Restart your PC

5. Verify Defender is active after reboot

   1. Restart your computer
   2. Open Windows Security > Virus & threat protection > Manage settings
   3. Confirm Real-time protection is still On
   4. Go back to Virus & threat protection
   5. Under Current threats, click Quick scan to confirm Defender is working normally

6. Update Windows if the setting still will not stay on

   1. Open Settings > Windows Update
   2. Click Check for updates
   3. Install all available updates
   4. Restart and test Defender again
      Security platform updates often fix broken Defender behavior.

Fix It Automatically with Kudu

If Defender keeps turning off, Kudu can quickly check for conflicting antivirus software, broken security settings, disabled services, and other common Windows problems that stop protection from staying active. It saves time by finding the issue fast and helping you apply the right fix without digging through multiple Windows menus.

Download Kudu Free →