Configuring and activating Windows Defender

Since Beckhoff cannot give any prior assurance regarding the behavior of Windows Defender after future updates, and since many controllers are unable to regularly procure the updates required for effective use, the component is deactivated by a group policy in the standard images from Beckhoff. This group policy has a different name depending on the operating system

Activate Windows Defender with Windows 10 2016 LTSB

1. Open Windows Run with the shortcut [Windows + R] and enter "gpedit.msc". Confirm the dialog with OK.

Configuring and activating Windows Defender 1:
The group policy editor opens.
2. Change the "Turn off Windows Defender" entry as appropriate.
Configuring and activating Windows Defender 2:
3. Start Windows Defender in the system control or search for "Windows Defender".
Configuring and activating Windows Defender 3:
4. Activate Windows Defender with the Start now button.
Configuring and activating Windows Defender 4:
Windows Defender is activated.

Activate Windows Defender with Windows 10 2019 LTSC and Windows 10 2021 LTSC

1. Open Windows Run with the shortcut [Windows + R] and enter "gpedit.msc". Confirm the dialog with OK.
Configuring and activating Windows Defender 5:
The group policy editor opens.
2. Adjust the "Turn off Windows Defender Antivirus" entry as appropriate.
3. Execute the Windows Defender settings in the Windows Security Center. You can enter "Windows Security Center" in the search.
Configuring and activating Windows Defender 6:
4. Activate Windows Defender with the Start now button.
Configuring and activating Windows Defender 7:
Windows Defender is activated.

Windows Defender under Windows 11 2024 LTSC

When using Windows 11 2024 LTSC, Windows Defender can no longer be switched off locally, as it is protected by tamper protection:

https://learn.microsoft.com/en-us/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection

If third-party antivirus software is used, this constitutes an exception. In this case, you can deactivate Windows Defender despite tamper protection:

https://learn.microsoft.com/en-us/defender-endpoint/defender-antivirus-compatibility-without-mde