The message "This setting is managed by your administrator" means Windows Defender settings are controlled by a policy, often due to group policies, third-party antivirus, domain enrollment, or MDM tools. 2. To fix it on a personal computer, first uninstall any third-party antivirus software and restart. 3. If using Windows Pro or higher, open gpedit.msc, navigate to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus, and set all enforced policies to Not Configured. 4. For all Windows versions, open regedit, go to HKEY_LOCAL_MACHINEThis setting is managed by your administrator in Windows DefenderSOFTWAREThis setting is managed by your administrator in Windows DefenderPoliciesThis setting is managed by your administrator in Windows DefenderMicrosoftThis setting is managed by your administrator in Windows DefenderWindows Defender, and set DisableAntiSpyware and DisableAntiVirus to 0 or delete them, then do the same under Real-Time Protection for DisableRealtimeMonitoring. 5. If the device is managed by Intune or MDM, go to Settings > Accounts > Access work or school, and disconnect the work account if possible. 6. Run the Windows Security troubleshooter via Settings > System > Troubleshoot to fix configuration issues. 7. In organizational environments, contact IT instead of bypassing restrictions. 8. If issues persist, check for leftover policies or perform a system restore to a point before the problem occurred. This process helps regain control of Defender settings when you are the legitimate administrator.

If you're seeing the message "This setting is managed by your administrator" in Windows Defender (Microsoft Defender), it means that certain security settings are controlled by a policy—either through a local group policy, a domain controller, or a third-party application—and cannot be changed directly by the user. This is common in work or school environments, but it can also appear on personal computers.

Here’s what you need to know and how to potentially fix or work around it.

? Why This Happens

This message appears because a Group Policy, registry setting, or management tool has taken control of Windows Defender settings. Common causes include:

• Your device is part of a domain or organization (e.g., company or school network).
• You're using a work profile or Azure AD-joined device.
• A third-party antivirus installed and locked Defender settings.
• Local Group Policy or registry edits are enforcing control.
• Windows in S mode, or managed by Intune/MDM (Mobile Device Management).

?? How to Fix It (If You're the Admin)

If you're the actual administrator of the device (e.g., on a personal PC), here are steps to regain control:

1. Check for Third-Party Antivirus Software

Some antivirus programs disable or take over Windows Defender.

• Go to Settings > Apps > Installed apps.
• Look for any third-party antivirus (e.g., McAfee, Norton, Avast).
• Uninstall it if not needed.
• Restart your PC—Defender should re-enable automatically.

?? Note: Windows Defender usually disables itself when another AV is active. Removing the other AV should restore control—unless policies were left behind.

2. Check Local Group Policy (gpedit.msc)

Available on Windows Pro, Education, or Enterprise editions.

1. Press Win R, type gpedit.msc, and press Enter.
2. Navigate to:
   Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus
3. Look for policies like:
   • Turn off Microsoft Defender Antivirus → Set to Disabled or Not Configured
   • Real-time protection settings → Ensure not enforced
4. Double-click each, set to Not Configured, then click OK.
5. Run gpupdate /force in Command Prompt (as admin), then restart.

? Home edition users: gpedit.msc isn’t included by default. You’ll need to edit the registry instead.

3. Edit Registry (For All Windows Versions)

?? Back up the registry first. Incorrect changes can break your system.

1. Press Win R, type regedit, press Enter.
2. Navigate to:
   HKEY_LOCAL_MACHINEThis setting is managed by your administrator in Windows DefenderSOFTWAREThis setting is managed by your administrator in Windows DefenderPoliciesThis setting is managed by your administrator in Windows DefenderMicrosoftThis setting is managed by your administrator in Windows DefenderWindows Defender
3. Look for:
   • DisableAntiSpyware → Set value to 0 or delete the entry
   • DisableAntiVirus → Same
4. Also check:
   HKEY_LOCAL_MACHINEThis setting is managed by your administrator in Windows DefenderSOFTWAREThis setting is managed by your administrator in Windows DefenderPoliciesThis setting is managed by your administrator in Windows DefenderMicrosoftThis setting is managed by your administrator in Windows DefenderWindows DefenderThis setting is managed by your administrator in Windows DefenderReal-Time Protection
   Ensure settings like DisableRealtimeMonitoring are set to 0 or deleted.
5. Restart your computer.

? Tip: If the Policies key doesn’t exist, the restriction likely isn’t from local registry.

4. Check for MDM or Intune Management

If your PC says it’s managed (e.g., "Managed by your organization" in Settings):

1. Go to Settings > Accounts > Access work or school
2. If a workplace account is listed, select it and click Disconnect (if allowed).
3. This removes Intune/MDM policies that may be locking Defender.

? If you’re in a company/school environment, you may not be able to remove this without IT support.

5. Run the Windows Defender Troubleshooter

Sometimes built-in tools can detect and fix misconfigurations.

• Go to Settings > System > Troubleshoot > Other troubleshooters
• Run the Windows Security troubleshooter.

? When You Can’t Change It (And That’s Okay)

In corporate or educational environments, this restriction is intentional. You shouldn’t bypass it without approval, as it may violate policies.

Instead:

• Contact your IT department.
• Ask if they can adjust the policy or explain why settings are locked.

? Summary

If you're on a personal computer and followed the steps above, you should regain control of Windows Defender settings. If not, double-check for leftover policies or consider a system restore from before the issue started.

Basically, the message means "someone else is in charge"—your job is to figure out who (or what) that is and take appropriate action.

The above is the detailed content of 'This setting is managed by your administrator' in Windows Defender. For more information, please follow other related articles on the PHP Chinese website!