{"id":717,"date":"2020-09-27T18:53:42","date_gmt":"2020-09-27T23:53:42","guid":{"rendered":"http:\/\/blog.mindworkshop.com\/?p=717"},"modified":"2023-07-17T20:34:30","modified_gmt":"2023-07-18T01:34:30","slug":"windows-speedup-disabling-defenders-real-time-protection","status":"publish","type":"post","link":"https:\/\/blog.mindworkshop.com\/?p=717","title":{"rendered":"Windows Speedup: Disabling Defender\u2019s Real Time Protection"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/blog.mindworkshop.com\/image\/windows020.png\" align=\"right\" border=\"0\" alt=\"picture\"\/>The Windows Defender application that installs with Windows 10 is an estimable security application, with a rigorously-maintained database of threats. That it costs nothing to use has a lot to be said for it as well. Like most security software, however, it likes to wander into the insanely-paranoid section of the theater from time to time.<\/p>\n<p>Left to its own devices, Windows Defender will avail your computer of a laudable degree of protection from malware and other intrusions by cybercretins. It can also substantially reduce the usefulness of the system it\u2019s running on.<\/p>\n<p>One of the more questionable features of Windows Defender is its real time protection. Real time protection scans every file that arrives on your computer \u2013 in real time, as its name implies \u2013 to defend you against invading e-mail attachments, venomous downloads and malicious web browser plugins, among many other things. <\/p>\n<p><!--more--><\/p>\n<p>Real time protection sounds like a redoubtable bulwark against the Internet\u2019s numerous bottom-feeders, script kiddies and brain donors\u2026 but it comes with a catch. All that scanning requires a lot of system resources. Unless you sprang for a really fast computer with enough memory to fully occupy a modest suburban livingroom, having Defender\u2019s real-time protection running will slow your system down\u2026 probably quite a lot. <\/p>\n<p>Many users of Windows 10 never appreciate how much quicker their computers could run, as real-time protection is enabled by default. It\u2019s also a bit tricky to disable.<\/p>\n<p>Earlier releases of Windows 10 allowed real time protection to be disabled through the Windows Settings panel, but during the summer of 2020 this feature mutated. It would thereafter only allow real-time protection to be switched off for a few minutes, after which it turned itself back on.<\/p>\n<p>With real time protection running, larger applications such as <a href=\"http:\/\/www.mindworkshop.com\/gwspro.html\" target=\"_blank\" rel=\"noopener noreferrer\">Graphic Workshop Professional<\/a>, most web browsers, productivity software and just about anything else that needs the attention of your system\u2019s processor will prove to be annoyingly slow.<\/p>\n<p>There are unquestionably circumstances in which the additional body armor of Windows Defender\u2019s real time protection is warranted, for example:<\/p>\n<ul>\n<li>If you share a computer with other users or family members that you don\u2019t trust to be careful with its security.<\/li>\n<li>If you\u2019re somewhat absent-minded, and periodically click on e-mail attachments without thinking about what they might contain.<\/li>\n<li>If you download software or other executable content from insecure web sites.<\/li>\n<\/ul>\n<p>In the event that your system is genuinely at risk, you should arguably stop reading now and leave real time protection enabled.<\/p>\n<p>Alternately, if you are the sole user of your computer, have a functional brain and don\u2019t download stuff from sites with a lot of spelling errors and graphics you wouldn\u2019t want the rest of your family to know about, you could shut down real time protection and enjoy a substantial performance improvement for Windows 10.<\/p>\n<p>\u2026if only Windows would quit turning it back on.<\/p>\n<h6>The Secret Incantation<\/h6>\n<p><strong>Note:<\/strong> The following discussion involves making changes to the system settings and security applications for your computer. While the likelihood of all this going sideways and negatively impacting Windows\u2026 and your ability to use it\u2026 is remote, the possibility exists. We strongly recommend that you create a restore point and back up your hard drive before you proceed. We will be unable to assist you if any of this doesn\u2019t work. By reading beyond this paragraph you agree that Alchemy Mindworks accepts no responsibility for any loss, damage or expense caused by your use of this page and the information therein, however it occurs. You accept these terms and you indemnify and hold blameless Alchemy Mindworks and all its stockholders, employees and suppliers from any and all monetary costs including attorney&#8217;s fees and court costs arising out of your use of this page and any information provided by it.<\/p>\n<p>You can disable Windows Defender\u2019s real time protection functionality without affecting any of the other functions of Defender\u2026 but the procedure for doing so is less than obvious.<\/p>\n<p>The following requires access to the Windows Group Policy editor, which is only installed in Windows 10 Professional. If you\u2019re using Windows 10 Home, you\u2019ll need to Google for assistance in installing gpedit.msc or sneak around the problem using the Windows Regedit application, to be discussed in a moment.<\/p>\n<p>To permanently shut down real time protection:<\/p>\n<ol>\n<li>Open the Settings panel from the Windows Start menu.<\/li>\n<li>Select <strong>Update and Security<\/strong> from Settings.<\/li>\n<li>Select <strong>Windows Security<\/strong>.<\/li>\n<li>Select <strong>Virus and Threat Protection<\/strong>.<\/li>\n<li>Under Virus And Threat Protection Settings, select <strong>Manage Settings<\/strong>.<\/li>\n<li>Scroll down until you locate the <strong>Tamper Protection<\/strong> option and turn it off. This will allow the rest of this procedure to work correctly.<\/li>\n<li>Close Settings.<\/li>\n<li><img decoding=\"async\" src=\"https:\/\/blog.mindworkshop.com\/image\/windows018.png\" align=\"right\" border=\"0\" alt=\"picture\"\/>Open the Windows Start menu and select Run. Enter <strong>gpedit.msc<\/strong> in the Run field and click on Ok. The Local Group Policy Editor will open.<\/li>\n<li>Select <strong>Computer Configuration<\/strong>.<\/li>\n<li>Select <strong>Administrative Templates<\/strong>.<\/li>\n<li>Select <strong>Windows Components<\/strong>.<\/li>\n<li>Select <strong>Microsoft Defender Antivirus<\/strong>.<\/li>\n<li>Select<strong> Real Time Protection<\/strong>.<\/li>\n<li>Enable <strong>Turn Off Real Time Protection<\/strong>.<\/li>\n<\/ol>\n<p>You might want to repeat the first seven steps, above, to return to the Virus and Threat Protection Settings panel. Real time protection should be off, with a note in red text that says \u201cthis setting is managed by your administrator.\u201d In this example, your administrator is you.<\/p>\n<p>Reboot your computer and check that real time protection remains history.<\/p>\n<p>In the event that you subsequently change your mind about disabling real time protection, you can reverse the foregoing to disable the Turn Off Real Time Protection option in the Local Group Policy Editor window, and re-enable real time protection.<\/p>\n<h6>Using Regedit<\/h6>\n<p>The Group Policy Editor discussed earlier in this posting updates the Windows system registry \u2013 at least, it does in this case. If you don\u2019t have access to Group Policy Editor \u2013 probably because you\u2019re running Windows 10 Home, which doesn\u2019t include it \u2013 you can make these registry changes by hand using Windows Regedit.<\/p>\n<p>Before you get started, we recommend that you re-read the warning at the beginning of the previous section. Used carefully, Regedit is a powerful tool to adjust Windows\u2019 innumerable parameters and settings. Used incautiously, it has the capacity to leave your computer a smoldering ruin. A restore point and a hard drive backup are seriously recommended.<\/p>\n<p>To permanently shut down real time protection using Regedit:<\/p>\n<ol>\n<li>Open the Settings panel from the Windows Start menu.<\/li>\n<li>Select <strong>Update and Security<\/strong> from Settings.<\/li>\n<li>Select <strong>Windows Security<\/strong>.<\/li>\n<li>Select <strong>Virus and Threat Protection<\/strong>.<\/li>\n<li>Under Virus And Threat Protection Settings, select <strong>Manage Settings<\/strong>.<\/li>\n<li>Scroll down until you locate the <strong>Tamper Protection<\/strong> option and turn it off. This will allow the rest of this procedure to work correctly.<\/li>\n<li>Close Settings.<\/li>\n<li><img decoding=\"async\" src=\"https:\/\/blog.mindworkshop.com\/image\/windows019.png\" align=\"right\" border=\"0\" alt=\"picture\"\/>Open the Windows Start menu and select Run. Enter <strong>regedit.exe<\/strong> in the Run field and click on Ok. The Registry Editor will open.<\/li>\n<li>Select <strong>HKEY_LOCAL_MACHINE<\/strong>.<\/li>\n<li>Under HKEY_LOCAL_MACHINE select <strong>\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\\<\/strong>.<\/li>\n<li>Unless it already exists, you\u2019ll need to add a new key under Windows Defender called <strong>Real-Time Protection<\/strong>. Right-click on Windows Defender and select new from the menu that appears. Select Key. A new key will be created under Windows Defender. Right-click on it and rename it to <strong>Real-Time Protection<\/strong>. Check that you\u2019ve named it correctly \u2013 spelling counts.<\/li>\n<li>Select Real-Time Protection, right-click in the right-most pane of Regedit and select New. Create a new DWORD value. Right-click on your new value and rename it to <strong> DisableRealtimeMonitoring<\/strong>. Right-click on DisableRealtimeMonitoring and modify its value to be 1.<\/li>\n<li>Exit Regedit.<\/li>\n<\/ol>\n<p>You might want to repeat the first seven steps, above, to return to the Virus and Threat Protection Settings panel. Real time protection should be off, with a note in red text that says \u201cthis setting is managed by your administrator.\u201d In this example, your administrator is you.<\/p>\n<p>Reboot your computer and check that real time protection remains history.<\/p>\n<p>In the event that you subsequently change your mind about disabling real time protection, you can reverse the foregoing remove the new value and key you&#8217;ve created, and re-enable real time protection.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Windows Defender application that installs with Windows 10 is an estimable security application, with a rigorously-maintained database of threats. That it costs nothing to use has a lot to be said for it as well. Like most security software, however, it likes to wander into the insanely-paranoid section of the theater from time to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-717","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/blog.mindworkshop.com\/index.php?rest_route=\/wp\/v2\/posts\/717","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.mindworkshop.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mindworkshop.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mindworkshop.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mindworkshop.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=717"}],"version-history":[{"count":0,"href":"https:\/\/blog.mindworkshop.com\/index.php?rest_route=\/wp\/v2\/posts\/717\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mindworkshop.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=717"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mindworkshop.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=717"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mindworkshop.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=717"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}