![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 48%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
Can confirm here as well, been like this for the past few insider builds, not entirely sure if it's Insiders related.. but i'm guessing it is.
Defender Antivirus "turned off"
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 28.000000000000004%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK1%3C/text%3E%3C/svg%3E)
kirbster 1
125
Reputation points
Windows 11 25H2 26200.8968 Release Preview
I keep getting notifications that Defender Antivirus is turned OFF. Every last toggle in Defender settings is toggled on, I get Antivirus updates, am able to run scans but I keep getting the notification window that Antivirus if off. I have notifications "toggled off" but still get the antivirus off notifications.
This is happening on a 2 day old Clean Install of Windows 11.
Any ideas why this is happening?
Windows Insider program | Windows Insider preview | Security, privacy, and accounts
7 answers
Sort by: Newest
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 15%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAL%3C/text%3E%3C/svg%3E)
Alex-L 13,080 Reputation points Microsoft External Staff Moderator2026-07-26T08:11:05.8333333+00:00 Hi kirbster 1
Since you're on a Windows 11 Release Preview build (25H2 26200.8968) and Defender is clearly updating, scanning, and all protection toggles are enabled, this may be a Windows Security reporting bug rather than Defender actually being disabled.
A few things to check:
- Open PowerShell (Admin) and run:
If these returnGet-MpComputerStatus | Select AntivirusEnabled, RealTimeProtectionEnabled, AMServiceEnabledTrue, Defender is running despite the warning. Open services.msc and confirm Microsoft Defender Antivirus Service (WinDefend) is running. Reset the Windows Security app: Settings > Apps > Installed apps > Windows Security > Advanced options > Reset. - Run:
Check if any third-party security software (including remnants from a previous install) is registered with Windows Security Center.sfc /scannow DISM /Online /Cleanup-Image /RestoreHealth
Because this is occurring on a Release Preview Insider build, if
Get-MpComputerStatusshows Defender is enabled, I'd lean toward a false notification/reporting issue rather than a protection issue.As this is a public forum, no one here can access internal builds to investigate this for you. You can submit feedback through Feedback Hub (Win + F) and include a screenshot plus a copy of the PowerShell output above.
Hope this will get sorted out soon!
- Open PowerShell (Admin) and run: