I cannot stop the Windows Defender Service in any way, I even tried running the CMD with the System account using PsExec but I always get access denied. I also try to delete or change the WinDefend registry subkey, but does not matther if you are the owner, or you run Regedit.exe with the System account, that sub-key cannot be deleted.

Does anyone know why?

T

Hi Sergio Caldern,

Please try the following methods to solve this issue:

Method 1: Disable Services in "Services" Window

1. Click Windows + R, type services.msc in search box, and then press Enter.
2. In the right pane of the Services snap-in, locate and double-click Windows Defender Service.
3. Change the value of Service status to Stop.
4. Click OK to save the changes.
5. Close the Services window.

Note:If the service will not stop and gives an error prompt, then you will need to restart the computer to stop it after you set it to Disabled and clicked OK.

Method 2: Disable Services using "sc commands

1. Click Start, and type cmd in the Search box.
2. Right-click cmd.exe in the Programs list, and then click Run as administrator.
3. Type the command sc stop WinDefend in the elevated command prompt, press Enter
4. Close the command prompt.

Note: Disabling directly a service can be dangerous. Please make sure that its an unnecessary service.

Hope this helps!

Regards,

Lany Zhang

Lany, thanks for answering but please, try yourself disabling this service in Windows 8.1 and you will see.

As I said, it seems there is not way to disable it, from Service console is greyed out, from sc or net stop access denied, no matter if I use the system account, by the registry is the same thing.

Lany, thanks for answering but please, try yourself disabling this service in Windows 8.1 and you will see.

As I said, it seems there is not way to disable it, from Service console is greyed out, from sc or net stop access denied, no matter if I use the system account, by the registry is the same

Lany, thanks for answering but please, try yourself disabling this service in Windows 8.1 and you will see.

As I said, it seems there is not way to disable it, from Service console is greyed out, from sc or net stop access denied, no matter if I use the system account, by the registry is the same

How about reading his post first.

I was going to suggest using Safe Mode to disable.  But your solution is just as good--if not better.

I was going to suggest using Safe Mode to disable.  But your solution is just as good--if not better.

I tried Safe Mode, but got the same error. That's a pretty unknown Windows

Now I have confirmed it is not a bug. This is the answer from Mark Russinovich himself about why those registry keys cannot be modified:

"Windows Defender has a kernel-mode driver (wdfilter.sys) that registers a Registry callback filter which protects Defenders registry keys."

for me it works the way I always disable Defender.

Run regedit.exe, take ownership of the key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender

and set the value DisableAntiSpyware to 1.

This works fine.

for me it works the way I always disable Defender.

Run regedit.exe, take ownership of the key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender

and set the value DisableAntiSpyware to 1.

This works

I don't udnerstand what you mean. Changing this vales disables the service correctly and Defender is completely o

you don't need to do this. Simply set the value I told you. This sets the service type to manual and this is fine. Now the service is disabl

I gave it up. I answered it already. Set the value and the service is stopped immediately after the ch

I gave it up. I answered it already. Set the value and the service is stopped immediately after the ch

The real "problem" is that you cannot change the Windows Defender Startup type, you can stopped if it is running, I know, by try changing the Startup type from Automatic to Manual. Can you?

YES, by doing what I told you several times. Change the value DisableAntiSpyware to 1, this stops the service and changes the start type from automatic to manual. Is this SO HARD TO UNDERSTAND?

*facepalm*

The real "problem" is that you cannot change the Windows Defender Startup type, you can stopped if it is running, I know, by try changing the Startup type from Automatic to Manual. Can you?

YES, by doing what I told you several times. Change the value DisableAntiSpyware to 1, this stops the service and changes the start type from automatic to manual. Is this SO HARD TO UNDERSTAND?

*fac