Turn off real-time protection

Supported on: At least Windows Vista

Registry

HKLM Software\Policies\Microsoft\Windows Defender\Real-Time Protection

Value name: DisableRealtimeMonitoring

Enabled: DisableRealtimeMonitoring = 1

Disabled: DisableRealtimeMonitoring = 0

Description

This policy turns off real-time protection in Microsoft Defender Antivirus. Real-time protection consists of always-on scanning with file and process behavior monitoring and heuristics. When real-time protection is on, Microsoft Defender Antivirus detects malware and potentially unwanted software that attempts to install itself or run on your device, and prompts you to take action on malware detections. If you enable this policy setting, real-time protection is turned off. If you either disable or do not configure this policy setting, real-time protection is turned on.