For more information, see Make the switch from non-Microsoft endpoint protection to Microsoft Defender for Endpoint. You have to add Microsoft Defender for Endpoint to the exclusion list for DSA. Microsoft Defender application files for exclusion list for DSA By removing the key, Microsoft Defender Antivirus is set to active mode.

The ' ForceDefenderPassiveMode' registry key sets Microsoft Defender Antivirus to the passive mode.

You may have to manually enable Windows Defender Antivirus to ensure it is in the active mode. By removing it, you have removed the disable key, enabling Microsoft Defender Antivirus.

The ' DisableAntiSpyware' registry key specifies whether to disable Microsoft Defender Antivirus.

If you turn off the DSA AM, either by deactivating or uninstalling it, it removes both 'DisableAntiSpyware' and the 'ForceDefenderPassiveMode' registry in Microsoft Defender: There's a confirmed machine performance impact while turning both Windows Defender and DSA AM on. On a Windows Server, you need to re-enable AM policy (disable > enable) again to let Defender to enter 'passive mode'. When you install Deep Security with the enabling AM feature on a Windows 10 or 11 desktop, Defender is automatically set to the 'passive mode'. Requires Deep Security Agent 20.0.0-4416 (20 LTS Update ) or later Neither Windows 10 x86 or Win 10 Enterprise Virtual Desktop is supported.

Other versions have not been tested and we cannot guarantee compatibility.

However, this support requires specific versions of both Windows Defender and Windows server / desktop, and of the Deep Security Agent (DSA):Ĭurrently these are the only versions that we have tested and support. The Deep Security Anti-Malware module can support the passive mode of Windows Defender. Windows Defender is automatically installed on Microsoft Windows Server 2016 and later and Windows 10 or newer. Configure Deep Security and Windows Defender

Windows defender deep scan