Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Defender 'Turned Off By Group Policy'


  • Please log in to reply
9 replies to this topic

#1 judorick

judorick

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:25 AM

Posted 09 April 2017 - 08:17 PM

I believe I've picked up malware which has stopped my Windows Defender from turning on

 

I get this message when I try:

 

"This application is turned off by group policy"

 

To allow this application to run, contact your security administrator to enable the program via group policy

 

 

Can anyone help? I think it's malware

 

Can do Screencast if needed



BC AdBot (Login to Remove)

 


#2 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:12:25 PM

Posted 09 April 2017 - 09:13 PM

Do you have any other third party antivirus software actively monitoring your computer if you do then the  third party antivirus software will disable Windows Defender automatically.


Posted Image


#3 judorick

judorick
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:10:25 AM

Posted 09 April 2017 - 10:27 PM

not when it first happened



#4 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:12:25 PM

Posted 10 April 2017 - 03:16 AM

In that case ask moderator to move your thread to Am I infected? What do I do? forum.

Posted Image


#5 zainmax

zainmax

  • Banned
  • 344 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:25 PM

Posted 10 April 2017 - 04:36 AM

In order to be able to help you better, you should say what version of Windows 10 you uses, ie the new version 1703 is slightly different from previous ones.
 
You are the options:
  1. stop limit by using the registry HKLM\Software\Policies\Microsoft\Windows Defender (if is version 1703, there may be key DisableAntiSpyware and value is 1 or 0 - 1 means Windows Defender is enabled, 0 - disabled, but you can delete this key at all. By default it is not there, ie DisableAntiSpyware.)
  2. enable Windows Defender using the Local Group Policy Editor 
    (how to use is here)
(NB: If you have Windows 10  version 1703, then there is word Windows Defender Antivirus, in the older versions is Windows Defender)
Read more

Edited by zainmax, 10 April 2017 - 04:53 AM.


#6 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:12:25 PM

Posted 10 April 2017 - 05:20 AM

If Windows OS infected by malware its better to remove the malware infection first if it was case of enabling Windows Defender i have batch script for disabling and enabling Windows Defender maybe malware remover expert will want to use the batch script i will include the download link for the batch script below.
 

Enable or Disable Windows Defender

Posted Image


#7 TTjean

TTjean

  • Members
  • 1 posts
  • OFFLINE
  •  

Posted 18 June 2017 - 06:22 AM

I go to HKey_Local_Machine\Software\Policies\Microsoft\Windows Defender

but I can't find DisableAntiSpyware registry key to delete it.



#8 sflatechguy

sflatechguy

  • BC Advisor
  • 2,266 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:25 AM

Posted 18 June 2017 - 09:11 AM

Also, it might be useful to ask if you've always owned this computer, or if it was purchased with Windows already installed. The Group Policy reference would seem to indicate that at some point, the computer was joined to an Active Directory domain. Some companies disable Defender via Group Policy and install their own software firewall and AV programs.



#9 jwoods301

jwoods301

  • Members
  • 1,489 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:25 AM

Posted 18 June 2017 - 04:05 PM

I go to HKey_Local_Machine\Software\Policies\Microsoft\Windows Defender

but I can't find DisableAntiSpyware registry key to delete it.

 

Never a good idea to make changes to the registry without backing it up first.

 

At the very least, create a System Restore point or use a product such as Registry Backup -

 

https://www.bleepingcomputer.com/download/registry-backup/



#10 Lvlpost

Lvlpost

  • Members
  • 77 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:hawai
  • Local time:04:25 PM

Posted 19 June 2017 - 04:05 AM

I go to HKey_Local_Machine\Software\Policies\Microsoft\Windows Defender

but I can't find DisableAntiSpyware registry key to delete it.

 

You can also enable Windows Defender via Group Policy

Step 1. First, you must be signed in as an administrator
Step 2. Open Local Group Policy Editor by pressing Windows Key + R then type gpedit.msc and click OK.
Step 3. Go to: Computer Configuration > Administrative Templates > Windows Components > Windows Defender.
Step 4. Find the Turn off Windows Defender. Double-click on it to modify.
Step 5. Choose Disabled. Click OK to save the settings.

 

Learn more at here: http://howtoinstallwindows10.com/windows-defender-is-turned-off-by-group-policy/

 

See more how to fix this error

 






1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users