How to Fix Windows Defender Won't Turn On

🔍The Decision That Saves You an Hour

Don't run all seven fixes blindly — the error text tells you exactly which layer is blocking Defender, and each layer needs a different tool:

• "Managed by your administrator," toggle greyed out → a Group Policy or registry key is forcing Defender off. Skip the service steps; go to Fix 3 (policy) and Fix 5 (registry). On Windows Home there is no Group Policy editor, so it is almost always the registry.
• "The service couldn't be started" or an error code → the service chain is broken. Go to Fix 2, then Fix 4 to repair the files those services load.
• Toggle flips back instantly, no "managed by" text → something is actively re-disabling it: either leftover third-party AV (Fix 1) or malware. If you removed an AV and it still flips, treat it as a possible infection and run an offline scan before anything else.

A policy-locked Defender will never respond to a service restart, and a broken service will never respond to a policy edit. Match the tool to the message first.

🔍Complete Fix Steps

Step 1: Fully Remove Any Third-Party Antivirus

Windows disables Defender automatically when it detects another active antivirus. A normal uninstall often leaves a driver or service behind that still registers as "active," so Defender stays off.

1. Go to Settings > Apps > Installed apps and uninstall any Norton, McAfee, AVG, Avast, Kaspersky, or similar product.
2. Restart, then download and run the official removal tool for that specific vendor (each major AV publishes one) to clear leftover drivers a normal uninstall misses.
3. Restart again and try enabling Defender.

You can run third-party AV instead of Defender if you prefer — but never both, and the old one must be completely gone for Defender to come back.

Step 2: Restart the Windows Security Services

1. Press Windows + R, type services.msc, press Enter.
2. For each of these — Microsoft Defender Antivirus Service, Security Center, and Windows Update — right-click > Properties, set Startup type to Automatic, and click Start if it's stopped.
3. Apply, OK, and restart the computer.

Step 3: Clear the Group Policy Block

Group Policy can hard-disable Defender. This editor exists only on Windows Pro, Enterprise, and Education — on Home, skip to Step 5.

1. Press Windows + R, type gpedit.msc.
2. Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus.
3. Set Turn off Microsoft Defender Antivirus to Not Configured or Disabled.
4. Under the Real-time Protection subfolder, set Turn off real-time protection to Not Configured or Disabled.

Step 4: Repair System Files

1. Open Terminal (Admin).
2. Run sfc /scannow and wait (10–30 minutes).
3. If it can't repair everything, run DISM /Online /Cleanup-Image /RestoreHealth, then sfc /scannow again.
4. Restart and retry Defender.

Step 5: Check the Registry Keys

Malware most often disables Defender through the registry, and this is the usual culprit on Windows Home. Editing the registry incorrectly can break Windows — change only the values named below.

1. Press Windows + R, type regedit.
2. Go to HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows Defender. If DisableAntiSpyware exists and is 1, set it to 0.
3. Go to HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows Defender\\Real-Time Protection. If DisableRealtimeMonitoring is 1, set it to 0.
4. Restart.

Step 6: Update Windows

1. Settings > Windows Update > Check for updates.
2. Install everything, especially security updates, and restart.

Step 7: Repair or Reset the Windows Security App

1. Settings > Apps > Installed apps, find Windows Security, click the three dots > Advanced options.
2. Click Repair first (no data loss). If that fails, click Reset.
3. Restart.

If Defender still won't run, the strongest move is a Microsoft Defender Offline scan (Virus & threat protection > Scan options) — it reboots and scans before Windows loads, which catches malware that blocks Defender while Windows is running.