How To Enable Windows Defender In Windows 10 | Turn It On

Defender Antivirus is pre-installed on Windows 10 and runs automatically. If the shield shows a red X, turn Real-time protection on in Windows Security.

Most Windows 10 PCs already have Microsoft Defender Antivirus running the moment the system boots — no download, no installation, no activation required. But if the security shield in the system tray shows a red X instead of a green checkmark, something turned off the built-in protection. This guide walks through how to enable Windows Defender in Windows 10 in every common scenario, starting with the simplest toggle and moving through the deeper fixes.

Is Windows Defender Already Enabled?

The quickest check is the shield icon in the system tray near the clock. A green checkmark means Defender is actively guarding your PC. A yellow warning means it’s running but needs attention — usually a missed update or a scan result that requires review. A red X or a blank area where the shield should be means Defender is off or another antivirus has taken over.

To confirm inside the app, open the Start menu, type Windows Security, and open it. The Virus & threat protection tile on the dashboard shows the same status with the same color coding. If that tile has a green check, you are fully protected and can stop here.

The table below breaks down every shield state at a glance.

Enabling Windows Defender On Windows 10: The Step Order That Works

If the shield shows a red X or the Windows Security app reports that protection is off, the fix is a direct path through the settings. These steps work on every edition of Windows 10, from Home to Enterprise.

1. Click the Start button and type Security, then select Windows Security from the search results.
2. On the main dashboard, click the Virus & threat protection tile — it has a shield icon and sits near the top of the window.
3. Under the Virus & threat protection settings heading, click Manage settings.
4. Toggle Real-time protection to On. If a User Account Control prompt appears, click Yes to authorize the change.
5. Return to the Windows Security home screen by clicking the house icon in the sidebar. The shield should now display a green checkmark.

Defender activates within seconds of the toggle. The next time you open the security overview, the status reads “No action needed.”

Why Is Windows Defender Disabled?

Several things can turn off Windows Defender without you noticing. The most common cause is a third-party antivirus — Norton, McAfee, Avast, or any other security suite — which automatically disables Defender when installed. Windows handles this by design to prevent two apps from fighting over the same protection tasks, per Microsoft’s official Defender documentation.

Other causes include manually switching Real-time protection off for testing or troubleshooting and forgetting to turn it back on, or a Registry edit that disables Defender permanently. On some corporate-managed PCs, Group Policy may have turned it off at the administrator level, which requires IT to revert the change.

Enabling Defender After Third-Party Antivirus Is Removed

When you uninstall a third-party antivirus, Defender does not always turn itself back on automatically. If the uninstall left behind configuration files or Registry entries, Windows may still think another antivirus is active.

The fix is the same step sequence above: open Windows Security, go to Virus & threat protection, click Manage settings, and toggle Real-time protection to On. If the toggle is grayed out, the third-party software is not fully removed. Run the vendor’s official removal tool — McAfee, Norton, and most major antivirus makers publish one — then restart your PC and try the toggle again.

How To Enable Windows Defender Using PowerShell

For users comfortable with the command line, PowerShell provides a quick way to verify and enable Defender without opening the settings window.

1. Right-click the Start button and select Windows PowerShell (Admin) or Terminal (Admin).
2. Type Get-MpComputerStatus and press Enter.
3. Look at the AMRunningMode row in the results. If it shows Active, Defender is running and protecting your system.

Final Checklist For Windows Defender Activation

If you have gone through the steps and Defender still is not running, run through this checklist once more.

• Open Windows Security and confirm the Virus & threat protection tile shows a green checkmark.
• Verify that Real-time protection is toggled On under Manage settings.
• Make sure no third-party antivirus is installed — check the Programs list in the Control Panel.
• If a third-party app was removed, restart the PC and check the toggle again.
• If the toggle is grayed out, Tamper Protection may need to be turned off temporarily under Manage settings.
• Run the command Get-MpComputerStatus in PowerShell and confirm AMRunningMode reads Active.

Once the shield icon shows a green checkmark in both the system tray and the Windows Security dashboard, Defender is fully enabled and protecting your PC.