Windows Defender is turned off and will not turn back on
Published 2026-02-03 · Updated 2026-08-14
Short answer: Windows Defender turns itself off automatically when another antivirus registers as the active provider — that is normal, correct behaviour, not a fault. If no other antivirus is installed and Defender still will not start, the usual causes are leftovers from a removed suite, a Group Policy registry key set by malware or by software you installed, or corrupted Windows security components.
Step by step
- Check for another antivirus providerWindows Security → Settings → Providers shows what currently holds real-time protection. If a third-party product is listed, Defender is off by design and there is nothing to fix.
- Remove leftovers from an old suiteIf you previously had a paid suite, remnants may still hold the registration after uninstalling. Run that vendor's official removal tool, then reboot.
- Look for a policy overrideThe message "Your IT administrator has limited access" or "managed by your organization" on a personal machine means a Group Policy key was written — either by malware or by a tuning/debloat utility. This is the most common cause after leftovers.
- Repair Windows componentsRun DISM /Online /Cleanup-Image /RestoreHealth then SFC /scannow from an elevated prompt. This rebuilds the security components if they were damaged.
- Scan offline if you suspect malwareMalware that disables Defender usually resists removal from within a running Windows session. Windows Security → Virus & threat protection → Scan options → Microsoft Defender Offline Scan reboots into a clean environment where the malware is not running.
What only the vendor can help with
Windows licensing, activation and account issues are handled by Microsoft directly through their official support channel.
Related questions
Is Windows Defender good enough on its own?
For most home users, yes. Defender scores comparably to paid suites in independent AV-TEST and AV-Comparatives evaluations, is included free with Windows, and does not slow the system the way some third-party suites do.
Why does my personal PC say "managed by your organization"?
A Group Policy or registry key has been written to your machine. On a personal computer this is almost always either malware suppressing protection, or a "debloat" or optimizer utility that set the policy. Either way it needs identifying before clearing it, since removing the key without removing the cause means it comes straight back.
Can malware turn off my antivirus?
Yes — disabling protection is one of the first things many infections attempt. Antivirus that switches off by itself and refuses to restart should be treated as a likely infection indicator and scanned offline.
Stuck on one of these steps?
We can walk through it with you remotely. Free diagnosis, and no charge if we cannot fix it.
Mon–Fri 8am–8pm, Sat–Sun 9am–6pm (local time) · Free diagnosis · No fix, no fee