When patched and rebooted, enable Windows Defender by executing the following PowerShell command: Set-MpPreference -DisableRealtimeMonitoring $False When patching the Exchange server you will notice how much faster it will be. Much easier is using PowerShell, just execute this command: Set-MpPreference -DisableRealtimeMonitoring $True Start | Settings | Update and Security | Windows Security | Open Windows Security I Virus & Threat protection I Manage SettingsĪnd switch Real-time protection to off as shown in the following screenshot: Start | Settings | Update and Security | Windows Defenderįor Exchange 2019 running on Windows 2019 follow these steps: To overcome this and speed up the overall performance of patching the Exchange server you can temporarily disable Windows Defender.įor Exchange 2016 running on Windows 2016 follow these steps: It just consumes a lot of processor cycles: When looking at the task manager, it is always the Antimalware Service Executable (Windows Defender Antivirus Service) that is responsible for this.

Set the option to Enabled, then click Okįor more information, see Microsoft's article on the topic.Patching an Exchange server, whether it be Windows Update, a Cumulative Update or a Security Update always takes a long time.

Double-click Turn off Windows Defender Antivirus.

Expand the tree to Windows Components ▸ Windows Defender Antivirus ▸ Real-time protection.In the Group Policy Management Editor, navigate to Computer configuration.Right-click the Group Policy Object and click Edit.On your Group Policy management machine, open the Group Policy Management Console.If you have PowerShell, run the following command: Uninstall-WindowsFeature -Name Windows-Defenderįor more information, see Microsoft's article on the topic.In the Remove Roles and Features Wizard, reach the Features step and deselect the Windows Defenders Features option.On the affected device(s), do one of the following: Therefore, we cannot turn off Defender during installation, and it will need to be disabled either manually on the device or via Group Policy Object.

Microsoft has revoked the API for Windows Server that allowed us to report the presence of our Antivirus, which would cause Windows to automatically disable Windows Defender.

Windows Defender will interfere with Essential/Premium/Ultimate Business Security on Windows Server OS and needs to be disabled prior to installation. Antivirus installations on Windows Server OS.

Windows server antimalware