PSA: a group policy to disable Windows Defender does not actually work

[birdie]

Check this article for more info:

DisableAntiSpyware

DisableAntiSpyware and DisableAntivirus

docs.microsoft.com

This is due to the Tamper Protection which first appeared in Windows 10 version 1903.

 

[ThrashZone]

Hi,
Lots of group policy options don't work
Some turned into being only enterprise options or subscription like education/..

 

[chrcoluk]

yep this is old news now, group policy is becoming more and more locked down.

 

[ThrashZone]

This however works

Windows 11 Tweaks for GPU Benchmark

Updated for 24H2 Install without Internet When it prompts you to go online, press Shift+F10 and type "OOBE\BYPASSNRO" (that's an o not a zero at the end). After the automatic reboot you can install without network Install on systems without TPM, UEFI or other requirements...

www.techpowerup.com

rem Disable Windows Defender. For this to work you have to manually disable "Tamper protection"
powershell "if ((Get-ItemProperty -Path 'HKLM:SOFTWARE\Microsoft\Windows Defender\Features').TamperProtection -eq 4) { exit 0; } ; Write-Output 'Windows Defender can not be disabled, Tamper Protection is still active' '' 'Disable Tamper Protection manually, then press OK' | msg /w *"
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Spynet" /v SpyNetReporting /t REG_DWORD /d 0 /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Spynet" /v SubmitSamplesConsent /t REG_DWORD /d 2 /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v SmartScreenEnabled /t REG_SZ /d "Off" /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v DisableRoutinelyTakingAction /t REG_DWORD /d 1 /f
reg delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v SecurityHealth /f

 

[Bill_Bright]

The article clearly says it is not intended for consumer devices.

 

[ThrashZone]

The article clearly says it is not intended for consumer devices.

Hi,
Yeah just something to push subscriptions
Home version is consumer pro has become borked.