Turns off Windows Defender Real-Time Protection, and no more scans are scheduled. If you enable this policy setting, Windows Defender does not run, and computers will not be scanned for spyware or other potentially unwanted software. If you disable or do not configure this policy setting, by default Windows Defender runs and computers are scanned for spyware and other potentially unwanted software. Vulnerability: A malicious agent could implement malware on unprotected computers. Counter Measure: Configure this policy based on the security requirements for your organization. Potential Impact: Depending on configuration, users may be unable to select a malware protection program other than Windows Defender. Fix: (1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsWindows DefenderTurn off Windows Defender (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindows Defender!DisableAntiSpyware

[enable/disable]

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Defender\Turn off Windows Defender (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender!DisableAntiSpyware