



This indicates that Microsoft Defender Antivirus has been automatically turned off to preserve compatibility with a third-party antivirus. Some services stop automatically if they are not in use by other services or programs.

While checking the app, you may see that Windows Defender Antivirus Service is set to manual, but when you try to start this service manually, you get a warning stating, The Windows Defender Antivirus Service service on Local Computer started and then stopped. The antivirus service name is Windows Defender Antivirus Service. Information about Microsoft Defender Antivirus will be listed within the Services app under Windows Defender > Operational. You can also open the app from the command-line by typing services.msc. To open the Services app, select the Search icon from the taskbar and search for services. Use Services app to check if Microsoft Defender Antivirus is turned off Other versions of Windows have different responses to Microsoft Defender Antivirus being run alongside third-party security software. The scenario just described applies only to Windows 10 and Windows 11. If you are using Microsoft Defender for Endpoint with a third-party antivirus installed, Microsoft Defender Antivirus will start in passive mode, with reduced functionality. On a Windows 10 or Windows 11 device, if you are not using Microsoft Defender for Endpoint, and you have a third-party antivirus installed, then Microsoft Defender Antivirus will be automatically turned off. How to tell if Microsoft Defender Antivirus won't start because a third-party antivirus is installed Windows Defender Antivirus scanning for spyware and other potentially unwanted software is disabled. New value: HKLM\SOFTWARE\Microsoft\Windows Defender\IsServiceRunning = 0x1 Old value: Default\IsServiceRunning = 0x0 If this is an unexpected event you should review the settings as this may be the result of malware. Windows Defender Antivirus Configuration has changed. Microsoft-Windows-Windows Defender/Operational Updated Windows Defender status successfully to SECURITY_PRODUCT_STATE_OFF. This issue can manifest in the form of several different event IDs, all of which have the same underlying cause. Selecting an event from the details pane will show you more information about an event in the lower pane, under the General and Details tabs. Information about Microsoft Defender Antivirus can be found under Applications and Services Logs > Microsoft > Windows > Windows Defender.įrom there, select Open underneath Operational. Open the Event viewer app by selecting the Search icon in the taskbar, and searching for event viewer. You can find help here if you encounter issues while migrating from a third-party security solution to Microsoft Defender Antivirus.
