How does defender work

Privacy policy. Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Comparing active mode, passive mode, and disabled mode The following table describes what to expect when Microsoft Defender Antivirus is in active mode, passive mode, or disabled.

Mode What happens Active mode In active mode, Microsoft Defender Antivirus is used as the primary antivirus app on the device. Files are scanned, threats are remediated, and detected threats are listed in your organization's security reports and in your Windows Security app. Passive mode In passive mode, Microsoft Defender Antivirus is not used as the primary antivirus app on the device.

Files are scanned, and detected threats are reported, but threats are not remediated by Microsoft Defender Antivirus. See Requirements for Microsoft Defender Antivirus to run in passive mode. Disabled or uninstalled When disabled or uninstalled, Microsoft Defender Antivirus is not used. Files are not scanned, and threats are not remediated.

In general, we do not recommend disabling or uninstalling Microsoft Defender Antivirus. The first versions of Windows Defender mainly garnered scorn and laughter, but since the arrival of Windows 10 this picture has changed drastically.

More and more, Windows Defender stands its ground and protects the PC against malware and other threats. In this article, we take a look at the main Windows Defender Antivirus protection options. From a standalone antivirus product it has now become a complete suite of security solutions within Windows.

No download or installation is required and it works from the first minute Windows starts. Compatibility problems with other software do not actually occur.

Like most security products, Windows Defender places an icon in the system tray next to the clock in the Windows Taskbar. If the icon in the form of a shield after all, it is about protection , click on it arrow up left in the system tray. If actions are required or if there is a warning, this can be seen directly at the icon.

If there is an exclamation mark, click on the shield and take the recommended actions. The better performance of Windows Defender is partly due to the changed security strategy of Microsoft.

When it was still called Microsoft Antispyware, Security Essentials and Windows Defender antivirus, Windows Defender was a separately installed security package for Windows , while since Windows Vista it is a standard component that is active in more and more places within Windows.

It is more than just antivirus, it also protects against malicious websites and acts as parental control, account protection and firewall. With this, Microsoft follows the strategy that good protection is located in several layers of defense around the object to be protected.

A strategy that we know from medieval castles with a moat, high walls and a keep in the middle. Windows Defender also offers this real-time protection.

It automatically performs a quick scan on a regular basis, checking key parts of the system and operating system for malware. If you want to know whether your system is safe, start such a scan yourself.

Click on the icon of Windows Security in the system tray next to the clock to access this item. The scan will start immediately, a moment later you will see if any threats have been found. If you do not only want to check vulnerable folders, but for example the entire computer, click on Scan options , with the choice of one Full scan or a Custom scan. The first scans all files on all drives and that can take a long time. The latter offers after a click on Scan now the ability to choose a folder or file.

In the meantime, the computer can be used as usual; other activity does affect the speed of the scan. So if you want to scan the entire computer and be sure as soon as possible whether there is an infection, leave the computer untouched during the scan. If malware is found and it is difficult to remove, try it via the Microsoft Defender Offline Scan , the bottom of the scan options.

First close all other programs and then click Scan now. Confirm the choice that you want to scan and let Windows Defender restart the computer. Windows will now reboot but in protected mode, in which it can really scan the computer from the outside. When set to active mode, Microsoft Defender acts as the primary antivirus app on your device. It scans files, remediates threats, and lists detected threats in security reports on the Windows Security app.

Microsoft Defender is automatically included with Windows 10, but if your computer is linked to a group or organization such as through your workplace , you may need to double-check that Microsoft Defender is actually enabled on your device. Click Computer Configuration , and then click Administrative Templates. Scroll down to the bottom of the list and look for Turn off Microsoft Defender Antivirus. Click on Disabled or Not configured whichever one is visible on your device.

Note that while this might seem contradictory, you're on the right track. You may want to temporarily disable Microsoft Defender if you're trying to install a third-party software or program onto your computer and the antivirus is blocking the installation. Another reason to turn off Microsoft Defender is if you want to use another antivirus program.

Click the Start button on your Windows computer, then click the Settings icon it looks like a gear. Click the toggle under Real-time protection to turn it off. It will turn gray when Microsoft Defender is disabled. First, you need to disable tamper protection. Click the Start button on your Windows computer, then search for Windows Security. Click on the app to open it. Click the toggle under Tamper Protection to disable this feature. Click the Start button, then search for gpedit.

Click the first result to open the Local Group Policy Editor. Double-click Turn off Microsoft Defender Antivirus. Click Enabled in the pop-up window, then Apply , then OK. If you choose to disable Microsoft Defender, it's a good idea to install another antivirus program to protect your computer from viruses and malware. Below are some third-party options to consider:.