Skip to main content

Disable Defender Antivirus cloud protection

Overview​

About this category

This category contains privacy scripts for Windows.

These changes use Windows system commands to update your settings.

This category contains scripts that disable or limit Microsoft Defender's cloud-based protection features.

Microsoft Defender's cloud protection is also known as Microsoft MAPS (Microsoft Active Protection Service) 1 2 3 or Microsoft SpyNet 2 3. It is an online community that helps detect and prevent the spread of malware 3.

These features automatically collect data and send it to Microsoft 3. They leverage user data to identify potentially malicious programs, sharing details such as file information, IP address, computer identification, and system/browser information 1 3. The collected data may include sensitive personal information 3.

The scripts in this category aim to:

  1. Reduce the amount of data sent to Microsoft about your system and Defender usage.
  2. Limit potential exposure of your files and system information.
  3. Decrease Microsoft's ability to track your security-related activities.

Disabling these cloud protection features may:

  • Enhance privacy by limiting data shared with Microsoft.
  • Improve system performance by reducing background data collection and transmission.
  • Increase control over what runs on your device.

However, it's important to note that these changes may also:

  • Reduce Defender's ability to detect new or complex threats quickly.
  • Limit the effectiveness of real-time protection updates.
  • Impact Microsoft's ability to improve Defender based on real-world data.

These scripts are recommended for users who prioritize privacy over potential security benefits from Microsoft's cloud-based analysis.

Caution

This change enhances privacy but may reduce overall system security.

Use with Caution

This category is only recommended if you understand its implications. Some non-critical or features may no longer function correctly after running this script.

Apply now​

These scripts are written using Batch (batchfile) scripting language.

Choose one of two ways to apply:

  1. Automatically via privacy.sexy: The easiest and safest option.
  2. Manually by downloading: Requires downloading a file.

Alternative 1. Apply with Privacy.sexy​

privacy.sexy is free and open-source application that lets securely apply this action easily.

Open privacy.sexy

It allows selectively choose parts of this action to conduct. You can fully restore this action (revert back to the original behavior) using the application.

privacy.sexy instructions
  1. Open or download the desktop application
  2. Search for the category name: Disable Defender Antivirus cloud protection.
  3. Check the category by clicking on the checkbox of the category.
  4. Click on Run button at the bottom of the page.

Alternative 2. Download​

Consider restarting your computer for all changes to take affect.

Reversible

This action is completely reversible, you can restore your changes to the initial/default state. The restore/revert methods provided here can help you fix issues.

If something goes wrong, use the Revert script provided above.

Strict​

This script includes Standard and Strict recommendation levels.

Use with Caution

This script is only recommended if you understand their implications of every single change. Some non-critical or features may no longer function correctly after running this script.

Download Strict scripts:

Download script

Restore these changes if you decide to revert them by downloading the restore script:

Download restore script

Explore further​

This category includes total of 7 scripts but no subcategories.

Explore its 7 scripts:

Disable Defender Antivirus "Block at First Sight" feature

This script disables the "Block at first sight". Block at first sight is Defender Antivirus feature. It protects against threats by quickly detecting and blocking new malware. When Defender Antivirus encounters a suspicious file it can't identify, it consults its cloud protection backend. The cloud backend uses heuristics, machine learning, and automated analysis to identify malicious files. This back-end is part of Cloud Protection. It is also known as Microsoft Active Protection Serv...

Disable Defender Antivirus "Extended Cloud Check" feature

This script disables the extended cloud check feature in Defender Antivirus by reducing its timeout. The extended cloud check is a Defender Antivirus feature. It allows Defender to block a suspicious file for up to 60 seconds while it is scanned in the cloud to verify its safety. This script reduces the extended cloud check timeout to 0, effectively disabling the feature. This maintains the standard (default) time, which is 10 seconds. This feature is part of Microsoft MAPS, also known as SpyNet...

Disable Defender Antivirus aggressive cloud protection

This script disables the aggressive cloud protection setting in Microsoft Defender Antivirus. Cloud protection delivers faster protection to devices compared to traditional security intelligence updates. It works on different aggressiveness levels in blocking and scanning suspicious files. This feature applies to both Microsoft Defender Antivirus and Microsoft Defender for Endpoint. By default, the protection level is unconfigured. This default state provides the least protection. Th...

Disable Defender Antivirus cloud-based notifications

This script disables notifications that can turn off security intelligence in Microsoft Defender. This script prevents the antimalware service from receiving notifications to disable individual security intelligence. Security intelligence is updated information that helps antivirus software detect and protect against the latest threats, working with cloud-based protection. The antimalware service, also known as Microsoft Defender Antivirus, is essential to both Microsoft Defender and Microso...

Disable Defender Antivirus cloud protection reporting

This script disables Microsoft Defender's cloud protection reporting. Cloud protection is was previously also known as Microsoft MAPS (Microsoft Active Protection Service). It was previously known as Windows Defender Antivirus Cloud Protection Service and Microsoft Defender Antivirus Cloud Protection Service. It's a feature of Defender Antivirus. This feature creates an online community that helps users address potential threats and prevent new malicious software. Participation in ...

Disable Defender Antivirus automatic file submission to Microsoft

This script disables Defender's automatic submission of file samples to Microsoft for analysis. Automatic file submission is a feature of Defender Antivirus. By default, Defender automatically sends 'safe' file samples to Microsoft for analysis. This action is part of Microsoft's Advanced Protection Service (MAPS). Previously, this service was known as Microsoft SpyNet. It is now referred to as cloud protection. This automatic collection and submission can include your personal i...

Disable Defender Antivirus real-time security intelligence updates

This script disables the real-time security intelligence updates in Defender. Real-time security intelligence updates are a feature of Defender Antivirus. They are part of Microsoft Active Protection Service (MAPS). MAPS is also known as Microsoft SpyNet or cloud protection. This service collects and sends personal data and other information to Microsoft. When enabled, if Defender encounters an unknown file and MAPS has new intelligence on a threat involving that file, it immediately...

Explore Categories​

This action belongs to Disable Defender data collection category. This category features scripts designed to reduce or eliminate data collection by Defender. Disabling these features enhances privacy by limiting the information shared with Microsoft. Although Microsoft Defender offers security benefits, it also collects data for analysis, service improvement,... Read more on category page ▶

Support​

This website relies on your support.

Support now

Your donation helps keep the project alive and improves its content ❤️.

Share this page:

EmailLinkedInRedditPinterestWhatsAppTelegramWeiboVK