Windows Security Center intermittently incorrectly reports that Endpoint Security is disabled on Windows 10

Technical Articles ID: KB91830
Last Modified: 2022-03-22 05:02:48 Etc/GMT

Environment

Endpoint Security (ENS) Threat Prevention 10.7.0, 10.6.1 July Update and later

Microsoft Windows Security Center (WSC)
Microsoft Windows 10

Problem

The Windows Security Center (WSC) intermittently incorrectly reports that ENS is disabled. WSC can prompt to enable Windows Defender.

Solution

This issue is resolved in ENS 10.6.1 December 2019 Update and ENS 10.7.0 February 2020 Update.

Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Workaround

ENS is enabled and functioning, but isn't reported in the WSC. You can disable Windows Defender to avoid a conflict.

Microsoft has provided the procedure below for customers to disable the Windows system toast notifications for Security and Maintenance. This action avoids alerting users to resulting false positive "antivirus disabled" messages.

Use Group Policy settings to disable Windows Defender Antivirus:
(For more information, see this Microsoft article on group policy and Windows Defender Antivirus.)

On your Group Policy management system, open the Group Policy Management Console, right-click the Group Policy Object (GPO) you want to configure, and click Edit.
In the Group Policy Management Editor, go to Computer configuration.
Click Administrative templates.
Expand the tree to Windows components, Windows Defender Antivirus.
Enable the setting Turn off Windows Defender Antivirus.
Deploy the updated GPO as you normally do.

Use Group Policy settings to disable Windows system toast notifications for Security and Maintenance on Windows 10 1803 and earlier:

On your Group Policy management system, open the Group Policy Management Console, right-click the GPO you want to configure, and click Edit.
In the Group Policy Management Editor, go to User configuration.
Expand the tree to Preferences, Windows Settings.
Click Registry.
From the Action drop-down list, select New, Registry Item.

Fill in the New Registry Properties:

Action	Update
Hive	HKEY_CURRENT_USER
Key Path	Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance
Value name	Enabled
Value type	REG_DWORD
Value data	00000000

Click OK.
Deploy the updated GPO as you normally do.

Use Group Policy settings to disable all Windows system toast notifications for Security and Maintenance on Windows 10 1809 and later:
(For more information, see this Microsoft article on disabling system toast notifications.)

On your Group Policy management system, open the Group Policy Management Console, right-click the GPO you want to configure, and click Edit.
In the Group Policy Management Editor, go to Computer configuration.
Click Administrative templates.
Expand the tree to Windows components, Windows Security, Notifications.
Open the Hide all notifications setting and set it to Enabled. Click OK.
Deploy the updated GPO as you normally do.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Windows Security Center intermittently incorrectly reports that Endpoint Security is disabled on Windows 10

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Windows Security Center intermittently incorrectly reports that Endpoint Security is disabled on Windows 10

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title