如何修復' Windows Defender被小組策略關閉”

如果你看到“Windows Defender被組策略關閉”的提示，說明系統本地策略覆蓋了其默認行為。 1.首先檢查是否有管理員權限；2.若為公司或學校設備，請聯繫IT支持；3.在個人電腦上確認系統類型；4.嘗試通過組策略編輯器禁用衝突策略；5.若無法使用組策略則修改註冊表；6.設置完成後重啟電腦；7.也可通過PowerShell命令重新啟用實時監控等功能；8.如上述方法無效且設備受管理，建議聯繫管理員處理。以上步驟通常可解決該問題並恢復Windows Defender功能。

If you're seeing the message "Windows Defender is turned off by group policy," it means that your system's local policies are overriding its default behavior. This often happens on managed devices, like work or school computers, but it can also occur on personal machines if policies were manually changed.

Here's how to address it depending on your situation.

Check if You Have Admin Rights

Before diving into fixes, make sure you have administrator access to the machine. Without admin privileges, you won't be able to change group policy settings or modify Windows Defender behavior directly.

• If you're on a company or school device, contact IT support — they likely set these policies intentionally.
• On a personal computer, right-click the Start menu and go to System > About > Device specifications , then check under "System type" to see if you're using a 64-bit or 32-bit OS (this matters for registry edits later).

If you do have admin rights, proceed to the next steps.

Try Editing Group Policy (If Available)

If your version of Windows includes the Local Group Policy Editor (like Pro editions), you can try disabling the conflicting policy:

1. Press Win R , type gpedit.msc , and hit Enter.
2. Navigate to:

    Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus

3. In the right pane, double-click Turn off Microsoft Defender Antivirus .
4. Set it to Disabled , then click Apply and OK.
5. Restart your PC and check if Windows Defender starts working again.

⚠️ Note: This option may not appear if you're on a Home edition of Windows, which doesn't include the group policy editor.

Edit Registry as an Alternative

If you don't have access to the group policy editor (eg, Windows 10/11 Home), you can try modifying the Windows Registry instead:

1. Press Win R , type regedit , and press Enter.
2. Go to this path:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

3. Look for a DWORD value named DisableAntiSpyware .
   • If it exists and is set to 1 , double-click it and change it to 0 .
   • If it doesn't exist, you can create it (right-click > New > DWORD (32-bit) Value), name it DisableAntiSpyware , and set it to 0 .
4. Reboot your PC.

⚠️ Be very careful when editing the registry — a small mistake can affect system stability. Make a backup before making changes.

Use PowerShell or Command Prompt (Advanced Option)

You can also try resetting Windows Defender settings via command line tools:

1. Open PowerShell as administrator.
2. Run the following commands one at a time:

    Set-MpPreference -DisableRealtimeMonitoring $false
   Set-MpPreference -DisableBehaviorMonitoring $false
   Set-MpPreference -DisableOnAccessProtection $false

3. After running them, restart your PC and check if Defender is active.

These commands re-enable core components of Windows Defender that might have been disabled through policies or scripts.

Fixing the "Windows Defender is turned off by group policy" issue usually comes down to either reversing policy settings or adjusting registry values. If none of these work and you're on a managed device, it's best to reach out to the person managing the policies. Otherwise, the above methods should help restore Windows Defender to full functionality.

基本上就這些。

以上是如何修復' Windows Defender被小組策略關閉”的詳細內容。更多資訊請關注PHP中文網其他相關文章！