ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
Windows Defender startup type registry value is Manual instead of Disabled after installing Symantec Endpoint Protection
Article ID: 158056
Updated On:
Products
Endpoint Protection
Issue/Introduction
After installing Symantec Endpoint Protection 12.1.3 (SEP 12.1 RU3), the Windows Defender service startup type is set to Manual. With previous versions of SEP, the service startup type was set to Disabled.
Resolution
This behavior is as designed. A Windows 8 update prevents any direct changes to the registry key that controls the Windows Defender service startup type. In response to this change, SEP 12.1 RU3 instead changes only the value HKEY_LOCAL_MACHINE\Software\Microsoft\Windefend\DisableAntiSpyware to to Disabled (0x0). Windows Defender then automatically changes its own startup type to Manual (0x3).
Feedback
Yes
No
Powered by
