Microsoft Tells Users to Ignore False Defender Antivirus Disabled Alerts
Summary
Microsoft says false Defender Antivirus disabled alerts appear after recent updates on supported Windows client and server versions, although protection remains active. A fix is planned for a future update.
Key points
- False alerts in the Windows Security app say Microsoft Defender Antivirus is turned off and prompt users to turn it on.
- Microsoft says Defender Antivirus is functioning correctly and its settings show protection as active.
- The issue affects supported Windows client and server versions, including Windows 11 26H1 and Windows Server 2025.
- Alerts can appear at startup and intermittently afterward, and may persist even when notification settings are disabled.
- Microsoft advises users to ignore the alerts and says it will provide a fix in a future Defender Antivirus update.
- The problem has affected users in the Windows Insider Release Preview Channel since June.
Article Details
- Event Type
- Microsoft Defender Antivirus false-alert issue following updates.
- Impact
- On supported Windows client and server versions, the Windows Security app may incorrectly report that Microsoft Defender Antivirus is turned off and prompt users to enable it. Microsoft says protection remains active and is preparing a fix for a future update.
Vendors
Products
Microsoft Defender AntivirusThe erroneous alerts appear on affected systems in the Windows Security app and prompt users to “Tap or click to turn on Microsoft Defender Antivirus.”Windows 11 26H1The known issue affects all supported Windows client and server versions, including the latest Windows 11 26H1 and Windows Server 2025 releases.Windows SecurityThe false notifications appear in the Windows Security app after updates.Windows Server 2025The known issue affects all supported Windows client and server versions, including the latest Windows 11 26H1 and Windows Server 2025 releases.