As all of us know, Windows Defender is the free malware protection software that is pre-installed on Windows computers. Now the Windows Server operating system too, will ship with Windows Defender pre-installed and protect the Windows Server editions against known malware and regularly update its antimalware definitions through Windows Update.
Windows Server includes Microsoft Defender
Although Windows Defender will be installed, the user interface is not installed by default. You will have to manage Windows Defender by using WMI, Windows PowerShell, or Group Policy. To be able to use the user interface for Windows Defender, you will have to activate it via the Control Panel Add Features functionality or the Install-WindowsFeature cmdlet. But system administrators will be able to confirm and verify that it is running by running the following command: If Windows Defender is running, the State value will display Running. To be able to receive antimalware definition updates, you must have the Windows Update service running. If you use an update management service, like Windows Server Update Services (WSUS), you will have to ensure that updates for Windows Defender definitions are approved for the system. If you wish to disable real-time monitoring as follows:
Disable Microsoft Defender real-time monitoring in Windows Server
To disable real-time monitoring, start a Windows PowerShell console as an administrator run the following command, and hit Enter:
Enable Windows Defender real-time monitoring
To enable real-time monitoring, open a Windows PowerShell console as an administrator run the following command, and hit Enter: For a detailed read, visit TechNet. Read: How to configure Windows Defender.
