Turn off real-time protection

This policy setting turns off real-time protection prompts for known malware detection.

Windows Defender alerts you when malware or potentially unwanted software attempts to install itself or to run on your computer.

If you enable this policy setting, Windows Defender will not prompt users to take actions on malware detections.

If you disable or do not configure this policy setting, Windows Defender will prompt users to take actions on malware detections.

Supported on: At least Windows Vista

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows Defender\Real-Time Protection
Value NameDisableRealtimeMonitoring
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

windowsdefender.admx

Administrative Templates (Computers)

Administrative Templates (Users)