Symptoms
- Windows Security app shows a warning icon or error banner
- Real-time protection toggle won't switch on, or reverts to off
- A specific error code or message is shown within the app
- May follow installing/uninstalling third-party antivirus software
Likely causes
- CommonLeftover conflict from a previously installed third-party antivirusIncompletely removed security software often leaves Windows Defender disabled or conflicted.
- CommonA required Windows service is stopped or disabledWindows Security depends on several background services that can get disabled by mistake or by other software.
- PossibleGroup Policy or registry setting disabling DefenderCertain settings, sometimes left over from IT management tools or manual tweaks, can lock Defender off.
- PossibleMalware specifically disabling security softwareSome malicious software disables built-in protection as one of its first actions.
- Less commonCorrupted Windows Security app filesDamage to the app itself, separate from the underlying protection engine, can cause display errors.
What to do
- If you previously installed third-party antivirus software, use its official uninstaller/removal tool (many vendors provide a dedicated cleanup tool) to ensure it's fully removed, then restart.
- Open Services (search 'services.msc') and check that 'Windows Defender Antivirus Service' and related Security Center services are set to running/automatic.
- Check Group Policy settings if applicable (search 'gpedit.msc,' note this isn't available on Home editions) under Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus, ensuring nothing is set to disable it.
- Run 'sfc /scannow' to repair any corrupted system files related to the Security app.
- Run a scan using a reputable one-time malware scanner (like Microsoft Safety Scanner, downloaded directly from Microsoft) in case malware is actively blocking Defender.
- Restart the computer after each change, since some Security-related services need a fresh boot to re-initialize properly.
- If Defender still won't enable and no third-party antivirus is providing protection instead, consider installing a reputable third-party antivirus temporarily while resolving the underlying issue, so the PC isn't left unprotected.
When to call a pro
If Defender still won't enable after removing conflicting software and checking services, a technician can check for malware or Group Policy issues actively blocking it.
Safety
Generally low risk
Generally low risk for a careful person. Stop if anything looks different from what this guide describes.