Windows Defender: A perplexing Issue


Recommended Posts

My windows security icon in the system tray shows an exclamation mark, but upon bringing up window settings it says there are no actions that can be taken (images wind1 and wind2). Furthermore, when I try to scan anything with Windows Defender it says "Page not available: Your IT administrator has limited access to some of the areas of this app, and the item you tried to access is not available" (wind3). I've double-checked in user settings and it shows that I'm the only admin. How can I fix this?

 

System:

i7 8750H

8 Gigs Memory

GTX 1060

250 Samsung SSD

Windows 10 (build 19041.685)

wind1.JPG

wind2.JPG

wind3.JPG

winbuild.JPG

Link to comment
https://www.neowin.net/forum/topic/1403214-windows-defender-a-perplexing-issue/
Share on other sites

  On 13/12/2020 at 12:50, Nick H. said:

I see that you're running Windows 10 2004. Have you considered updating Windows to 20H2? There may be simpler solutions to the issue, but you may as well have an up-to-date system while you're at it. ;)

Expand  

Updated. The issue persists.

In regedit ... can you look at the key --- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender Security Center\App and browser protection

 

....and see if there is an entry "UILockdown" ... if so, change the value to 0 or delete the "UILockdown" entry.

 

Do you have any other security software installed...like McAfee or whatever?

Did you install any 3rd-party anti-virus/security programs? Change any group policy settings recently? Install a Windows "optimization"  program that tweaks the registry?  Are you using a Windows account to logon to the PC?

  On 13/12/2020 at 13:32, Jim K said:

In regedit ... can you look at the key --- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender Security Center\App and browser protection

 

....and see if there is an entry "UILockdown" ... if so, change the value to 0 or delete the "UILockdown" entry.

 

Do you have any other security software installed...like McAfee or whatever?

Expand  

I'm using Avast Antivirus. I'll try your fix and get back with result.

  On 13/12/2020 at 13:34, Superuser said:

Did you install any 3rd-party anti-virus/security programs? Change any group policy settings recently? Install a Windows "optimization"  program that tweaks the registry?  Are you using a Windows account to logon to the PC?

Expand  

1. Avast Antivirus

2. I don't recall doing that. Unless any of the Windows updates or application silently did something in the background.

3. No optimisation program whatsoever. The only third-party app protection is Avast Antivirus.

3. It's my own login which is connected to my MSN/Live account.
 

  On 13/12/2020 at 13:35, Nick H. said:

Also, have you tried logging in as the hidden administrator account and seeing if you can access the options from there?

Expand  

I... haven't. Will try it and let you know.

  On 13/12/2020 at 13:32, Jim K said:

In regedit ... can you look at the key --- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender Security Center\App and browser protection

 

....and see if there is an entry "UILockdown" ... if so, change the value to 0 or delete the "UILockdown" entry.

 

Do you have any other security software installed...like McAfee or whatever?

Expand  

Nope. No such key. There's only one REG_SZ that says "Default" and has no assigned value.

  On 13/12/2020 at 13:35, Nick H. said:

Also, have you tried logging in as the hidden administrator account and seeing if you can access the options from there?

Expand  

Same issue with the hidden administrator account.

Check Group Policy settings for App and browser control

 

Type Group Policy in search  ->  Edit group policy -> Under Computer Configuration expand Administitive Templates ->  Windows Components -> Windows Security ->  Click on App and browser protection

 

You should see 2 entries, Prevent users from modifying settings +  Hide the app and browser protection area

 

Highlight one and click "policy settings" ->  Click Next Setting -> Are either of these Enabled or Disabled as opposed to Not Configured?

 

You could try and reset all group policy settings back to default.

 

https://www.tenforums.com/tutorials/68549-reset-local-group-policy-editor-settings-default-windows-10-a.html

  On 13/12/2020 at 18:13, Riggers said:

Check Group Policy settings for App and browser control

 

Type Group Policy in search  ->  Edit group policy -> Under Computer Configuration expand Administitive Templates ->  Windows Components -> Windows Security ->  Click on App and browser protection

 

You should see 2 entries, Prevent users from modifying settings +  Hide the app and browser protection area

 

Highlight one and click "policy settings" ->  Click Next Setting -> Are either of these Enabled or Disabled as opposed to Not Configured?

 

You could try and reset all group policy settings back to default.

 

https://www.tenforums.com/tutorials/68549-reset-local-group-policy-editor-settings-default-windows-10-a.html

Expand  

Both of them say "not configured".

  On 13/12/2020 at 14:24, zakyr said:

1. Avast Antivirus

2. I don't recall doing that. Unless any of the Windows updates or application silently did something in the background.

3. No optimisation program whatsoever. The only third-party app protection is Avast Antivirus.

3. It's my own login which is connected to my MSN/Live account.
 

I... haven't. Will try it and let you know.

Expand  

I would uninstall Avast to see if that is the problem. Personally, I would keep it off my PC even if it is not the issue.

Avast has probably changed a registry setting [due to having its own mitigation methods], have a look in these 2 places [pictures below]. Does Avast allow Defender to run on demand or disables it completely?

 

Actually check all keys under Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\WindowsDefenderSecurityCenter and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender Security Center\App and browser protection

 

Look for any UILockdown with a value of 1 below.

 

Unless as above uninstalling Avast solves it.

 

Dont edit any keys unless you are comfortable doing it and write down what you did so you can change it back if needed, you may bork something so having a back up is crucial!

 

Have you tried the Avast forum to see if others have the same issue, it could well be by design...

 

 

key1.png

key2.png

 

  On 14/12/2020 at 12:57, Riggers said:

Avast has probably changed a registry setting [due to having its own mitigation methods], have a look in these 2 places [pictures below]. Does Avast allow Defender to run on demand or disables it completely?

 

Actually check all keys under Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\WindowsDefenderSecurityCenter and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender Security Center\App and browser protection

 

Look for any UILockdown with a value of 1 below.

 

Unless as above uninstalling Avast solves it.

 

Dont edit any keys unless you are comfortable doing it and write down what you did so you can change it back if needed, you may bork something so having a back up is crucial!

 

Have you tried the Avast forum to see if others have the same issue, it could well be by design...

 

Expand  

 

Values as they appear in registry. Didn't change anything.

 

1.JPG

2.JPG

One more registry key to try which I didn`t mention also stops Windows Defender. It should be empty and have just (Default).

Have you tried uninstalling Avast, preferably in Safe Mode with their Clean Up utility? This looks like something a third party AV would do!

 

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager

 

You can also open powershell and insert   Get-MpPreference   which should have UILockdown : False    (near the bottom)

 

Worth a look :)

  • 2 weeks later...

 

  On 15/12/2020 at 18:40, Riggers said:

One more registry key to try which I didn`t mention also stops Windows Defender. It should be empty and have just (Default).

Have you tried uninstalling Avast, preferably in Safe Mode with their Clean Up utility? This looks like something a third party AV would do!

 

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager

 

You can also open powershell and insert   Get-MpPreference   which should have UILockdown : False    (near the bottom)

 

Worth a look :)

Expand  

Yup. UILockdown is False. Also, the registry entry you mentioned is empty.

I guess I'll have to try uninstalling Avast then. But I'm baffled as to why Avast would disable WD all of sudden when they'd both been working alongside just fine beforehand.

I would consider not using Avast it's such a bad piece of software now.

 

What I do is use a 3 month trial of Bitdefender Total Security and then sign-up again and repeat using the same email but just move the period in it, you can do this with a Gmail address.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • misleading its one word to describe what M$ have done, windows 10 perform better on older hardware and even on new hardware sometimes, windows 11 its a mess and no one want to use it for many good reasons, until they listen its customers read the feedback hub comments and maybe backoff its forced requiremens, they are having a vista and 8 moment.
    • Media Player Classic - Home Cinema 2.5.0 by Razvan Serea Media Player Classic - Home Cinema (MPC-HC) is a free and open-source video and audio player for Windows. MPC-HC is based on the original Guliverkli project (which is no longer maintained) and contains many additional features and bug fixes. As the continuation of the original Media Player Classic, MPC-HC isn’t flashy but it works with nearly any media format. MPC-HC uses DXVA technology to pass decoding operations to your modern video card, enhancing your viewing experience. And MPC-HC supports both physical and software DVDs with menus, chapter navigation, and subtitles. Overview of features A lot of people seem to be unaware of some of the awesome features that have been added to MPC-HC in the past years. Here is a list of useful options and features that everyone should know about: Dark interface Menu > View > Dark Theme When using dark theme it is also possible to change the height of the seekbar and size of the toolbar buttons. Options > Advanced Video preview on the seekbar Options > Tweaks > Show preview on seek bar Adjust playback speed Menu > Play > Playback rate The buttons in the player that control playback rate take a 2x step by default. This can be customized to smaller values (like 10%): Options > Playback > Speed step Adjusting playback speed works best with the internal audio renderer. This also has automatic pitch correction. Options > Playback > Output > Audio Renderer MPC-HC can remember playback position, so you can resume from that point later Options > Player > History You can quickly seek through a video with Ctrl + Mouse Scrollwheel. You can jump to next/previous file in a folder by pressing PageUp/PageDown. You can perform automatic actions at end of file. For example to go to next file or close player. Options > Playback > After Playback (permanent setting) Menu > Play > After Playback (for current file only) A-B repeat - You can loop a segment of a video. Press [ and ] to set start and stop markers. You can rotate/flip/mirror/stretch/zoom the video Menu > View > Pan&Scan This is also easily done with hotkeys (see below). There are lots of keyboard hotkeys and mouse actions to control the player. They can be customized as well. Options > Player > Keys Tip: there is a search box above the table. You can stream videos directly from Youtube and many other video websites You can stream videos directly from Youtube and many other video websites Put yt-dlp.exe or youtube-dl.exe in the MPC-HC installation folder. Then you can open website URLs in the player: Menu > File > Open File/URL You can even download those videos: Menu > File > Save a copy Tip: to be able to download in best quality with yt-dlp/youtube-dl, it is recommended to also put ffmpeg.exe in the MPC-HC folder. Several YDL configuration options are found here: Options > Advanced This includes an option to specify the location of the .exe in case you don't want to put it in MPC-HC folder. Play HDR video This requires using madVR or MPC Video Renderer. After installation these renderers can be selected here: Options > Playback > Output Ability to search for and download subtitles, either automatically or manually (press D): Options > Subtitles > Misc Besides all these (new) features, there have also been many bugfixes and internal improvements in the player in the past years that give better performance and stability. It also has updated internal codecs. Support was added for CUE sheets, WebVTT subtitles, etc. Media Player Classic - Home Cinema 2.5.0 changelog: Updated LAV Filters to version 0.80-1-gb9116 Updated MPC Video Renderer to version 0.9.9.2400 Several small fixes and improvements. Graphics Designers Wanted for New Toolbar Buttons A new toolbar is planned for implementation in the player, featuring optional extra buttons and fully customizable layouts. As a result, existing custom toolbar designs will no longer be supported in the future. New button designs are needed, and contributions from graphics designers are welcome. Those interested in helping create the new toolbar are encouraged to read the dedicated information page. Download: MPC-HC 2.5.0 (x64) | Standalone | ~20.0 MB (Open Source) Download: MPC-HC 2.5.0 (x86) | Standalone Links: MPC-HC Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Then don't put it on an IoT VLAN but put it on your main, trusted, VLAN. If you put it on a different VLAN you lose printer discovery.
    • For me it isn't usable because I'm a power user. I need Wayland but I also need remote desktop. VNC isn't a thing with Wayland and freeRDP isn't nearly ready enough yet either. If I was less demanding (didn't need remote desktop or ran Xorg) I would probably be fine.
    • From Microsoft to RedHat, escape an American company for an American company, that would be funny
  • Recent Achievements

    • Week One Done
      emptyother earned a badge
      Week One Done
    • Week One Done
      DarkWun earned a badge
      Week One Done
    • Very Popular
      valkyr09 earned a badge
      Very Popular
    • Week One Done
      suprememobiles earned a badge
      Week One Done
    • Week One Done
      Marites earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      571
    2. 2
      ATLien_0
      183
    3. 3
      +FloatingFatMan
      173
    4. 4
      Xenon
      124
    5. 5
      Michael Scrip
      117
  • Tell a friend

    Love Neowin? Tell a friend!