# Troubleshooting Windows Defender

1. Microsoft Defender fails to launch automatically and reports an error when it is started manually from Action Center.
------------------------------------------------------------------------------------------------------------------------

### Probable cause:

 Reasons behind this issue might be malware infection, conflicting third-party applications, corruption in the system registry etc.

### Methods of recovery: 

- **Device Restart:** A simple device restart helps resolve the issue.
- **Remove third-party antivirus software:** If the device has any third-party antivirus or anti-spyware programs installed earlier, then you should remove them from the device.
- **Perform device scan to check for malware:** Check for any malicious activities on the device by performing a complete device scan. Use any of the on-demand scanners to scan the device.
- **SFC scan:** Use a System File Checker (SFC) tool to check if Microsoft Defender is corrupted. This tool repairs the system files if there are any corruptions found on checking.
- **Check for conflicting third-party applications:** Perform a clean boot on the device to verify that no third-party application conflicts with Microsoft Defender.
- **Restart Windows Defender Security Center:** Restart Windows Defender Security Center to resolve the issue. 
    1. Navigate to **Start > Run**.
    2. Enter the command **services.msc** and press **Enter**.
    3. Search **Security Center** and right-click on it.
    4. Choose **Restart**.
- **Remove conflicting Registry entries:** Often, malware on the device insert malicious entries in the registry that might prevent Microsoft Defender from running. Deleting conflicting entries helps Microsoft Defender to launch successfully. 
    1. Navigate to the **Start** menu > ‘Run’.
    2. On the Run command dialog box, enter **regedit** and click on  **Enter**.
    3. Next, navigate to *HKEY\_LOCAL\_MACHINE > Software > Microsoft > Windows NT > CurrentVersion > Image File Execution Options* on the Registry Editor window.
    4. Search for the following entries **MSASCui.exe, MpCmdRun.exe,** or **MsMpEng.exe**.
    5. If these entries are found, right-click on them, and click **Delete**.

2. While opening Microsoft Defender, the device displays an error message “This app is turned off by Group Policy”. 
--------------------------------------------------------------------------------------------------------------------

### Cause: 

 Windows disables Microsoft Defender when it detects an additional antivirus or any other conflicting software. Hence, you must enable it manually.

### Solutions:

1. Enabling Microsoft Defender via **Registry Editor**. 
    1. Go to the **Start** menu. Choose ‘Run’ from the menu.
    2. Type in the command **regedit** on the Run command dialog box and click Enter. It opens the Registry Editor.
    3. Go to *HKEY\_LOCAL\_MACHINE > SOFTWARE > Policies > Microsoft > Windows Defender*.
    4. For the entry named **DisableAntiSpyware**, change the value to 0. If this entry is absent, you may create it by right-clicking on the **Windows Defender** key and navigating to **New > DWORD**.
    5. Add the DWORD name – DisableAntiSpyware and value 0.
2. Enabling Microsoft Defender via **Group Policy Editor**. 
    1. Open the **Start** menu.
    2. Choose ‘Run’.
    3. On the Run command dialog box, type in gpedit.msc. Press Enter.
    4. Navigate to **Local Computer Policy > Administrative Templates > Windows Components**.
    5. Choose **Windows Defender**.
    6. Double-click **Turn off Windows Defender** from the right-side pane of the window.
    7. Configure it to **Disabled**.
    8. Click on **OK**.
    9. Restart the device.

3. Microsoft Defender Application Guard fails to run on touch-enabled Windows 10 Build 16193 devices and displays a solid black window while launching.
-------------------------------------------------------------------------------------------------------------------------------------------------------

### Temporary fix:

1. Open **Device Manager** on the device.
2. Under *Human Interface Devices*, uncheck the following options: 
    - HID-compliant touch screen
    - Intel Precise Touch Device.
3. Reboot the device and launch the Application Guard once again.

4. While trying to start Microsoft Defender, it fails to open by displaying an error message “An unexpected problem occurred”. 
-------------------------------------------------------------------------------------------------------------------------------

### Cause: 

 The device might have an outdated version of the Windows Operating System installed on it.

### Solution:

 Updating the device helps you resolve the issue. You can check for OS updates from the device settings.

1. Open the  **Settings** app.
2. Navigate to **Update & Security** section.
3. Select **Check for updates**.