Additional Microsoft Defender tools and services that provide security across various platforms and environments
This is a known issue in some recent Microsoft Defender Antivirus updates: Windows can show "Microsoft Defender Antivirus is turned off" notifications or provider status even when Defender is actually running correctly and all settings show it as active.
What this means:
- If real-time protection is on and scans are working, Defender can still be functioning normally.
- The incorrect Security providers status can be a false notification, not an actual protection failure.
- Microsoft has confirmed this issue and is working on a fix in a future Defender Antivirus update.
A second possible cause is a non-Microsoft antivirus product:
- On Windows 10 or Windows 11, if a non-Microsoft antivirus is installed and Microsoft Defender for Endpoint is not being used, Microsoft Defender Antivirus is automatically turned off.
- If Microsoft Defender for Endpoint is being used with a non-Microsoft antivirus installed, Defender Antivirus starts in passive mode with reduced functionality.
To check which case applies:
- Open Windows Security and confirm real-time protection is enabled.
- Open Services: select Search and type
servicesor runservices.msc. - Check Microsoft Defender Antivirus Service under Windows Defender > Operational.
- If the service is set to manual and starting it shows a message like started and then stopped, that can indicate Defender was automatically turned off for compatibility with a non-Microsoft antivirus.
- If no third-party antivirus is installed and Defender is otherwise working, this is likely the known false notification issue.
If the problem is only the incorrect notification/status, the current documented next step is to wait for a future Microsoft Defender Antivirus update. If needed, the issue can also be reported through Feedback Hub.
- Windows 11, version 24H2 known issues and notifications
- Windows 10, version 22H2 known issues and notifications
- Troubleshoot Microsoft Defender Antivirus while migrating from a non-Microsoft solution
- Windows Pop-up "Turn on virus protection" notification despite Windows Defender being already turned ON. - Microsoft Q&A