How do I know if I have windows defender real-time protection won't turn on issues?

Common symptoms of windows defender real-time protection won't turn on include: Real-time protection toggle greyed out — can't turn it on, "Real-time protection is off. Your device is vulnerable.", Real-time protection turns back off immediately after enabling, "Some settings are managed by your organization" on Security page, Windows Security shows all red/yellow icons but can't fix anything, Defender was disabled by another antivirus that was later uninstalled, Tamper Protection is on but Real-time protection still won't enable.

Fix Windows Defender Real-Time Protection Won't Turn

Symptoms

You might be experiencing this problem if you notice:

•Real-time protection toggle greyed out — can't turn it on
•"Real-time protection is off. Your device is vulnerable."
•Real-time protection turns back off immediately after enabling
•"Some settings are managed by your organization" on Security page
•Windows Security shows all red/yellow icons but can't fix anything
•Defender was disabled by another antivirus that was later uninstalled
•Tamper Protection is on but Real-time protection still won't enable

Common Causes

⚠Third-party antivirus remnants still registered as the active AV
⚠Group Policy or registry setting disabling Defender
⚠DisableAntiSpyware registry key set to 1 by malware or a tool
⚠Windows Security Center service (SecurityHealthService) not running
⚠Tamper Protection preventing the change (ironically)
⚠Corrupted Windows Security app
⚠Previous use of a "Defender disabler" tool that modified system policies

Solutions

Solution 1: Remove Third-Party Antivirus Remnants

1If you uninstalled an antivirus but Defender is still disabled:
2The old AV may not have fully unregistered itself
3Download the AV vendor's official removal tool:
4Norton: Norton Remove and Reinstall Tool
5McAfee: MCPR (McAfee Consumer Product Removal)
6Avast: avastclear.exe
7Kaspersky: kavremover
8Run the removal tool → restart → Defender should re-activate automatically

Solution 2: Fix Registry and Group Policy Settings

1Open Registry Editor as Administrator
2Navigate to: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender
3If "DisableAntiSpyware" exists and is set to 1: change it to 0 or delete it
4Also check: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection
5Delete "DisableRealtimeMonitoring" if it exists
6For Group Policy: gpedit.msc → Computer Configuration → Admin Templates
7→ Windows Components → Microsoft Defender Antivirus → "Turn off Microsoft Defender Antivirus" → Not Configured
8Run gpupdate /force → restart

Solution 3: Reset Windows Security App

1Open PowerShell as Administrator
2Run: Get-AppxPackage Microsoft.SecHealthUI -AllUsers | Reset-AppxPackage
3If that doesn't work: Get-AppxPackage *SecHealthUI* | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
4Restart the computer
5Open Windows Security → Virus & threat protection
6Try enabling Real-time protection now

Solution 4: Restart Security Services

1Open Services (services.msc) as Administrator
2Find and start these services if they're stopped:
3"Windows Security Service" (SecurityHealthService)
4"Microsoft Defender Antivirus Service" (WinDefend)
5"Security Center" (wscsvc)
6Set all to Automatic startup type
7If WinDefend won't start: the issue is likely a policy or registry block (see methods above)

FIXES THIS IN 5 MINUTES