Windows Defender And Norton Internet Security Are Both Turned Off

If Windows Defender and Norton Internet Security are both turned off, check the protection status in Windows Security and Norton, then restore one active antivirus provider. Microsoft Defender normally steps aside when another compatible antivirus is active. If neither provider is protecting the PC, restart.

Check whether antivirus protection is actually off

Windows Defender is now called Microsoft Defender Antivirus. Windows Security is the app that displays antivirus status alongside other security features. An alert about Defender alone does not establish that Norton is also inactive.

On a personal Windows PC, Defender normally turns off automatically when a compatible third-party antivirus takes over. The aim is to have one working real-time antivirus provider. Trying to force both engines to run together can cause conflicts. Microsoft explains this behaviour in its Defender settings guidance.

1. Open Start, search for Windows Security and open the app directly.
2. Select Virus & threat protection. Read the provider status and any action requested. If available, open Manage providers to see which antivirus Windows recognises.
3. Open Norton from Start. Check its security dashboard, real-time protection status, subscription status and any restart or repair message.
4. Write down the exact warning or error code. Distinguish a protection warning from an expired subscription, failed update or firewall alert.

If Norton reports active protection and Windows recognises it, Defender being off is usually expected. If both report that protection is disabled, address the gap promptly. Avoid installing unfamiliar software or opening unexpected attachments while troubleshooting.

Restart and complete outstanding updates

A pending restart or interrupted installation can leave security software in an incomplete state. Start with these checks before removing anything.

1. Save your work and choose Restart from the Windows power menu.
2. Open Settings, find Windows Update and install applicable updates. Restart again if requested.
3. If keeping Norton, run LiveUpdate from its security dashboard. Complete any requested restart and check for further protection updates.
4. Reopen Windows Security and Norton to see whether their reported status has changed.

Norton needs an active subscription to receive its security updates. Its LiveUpdate guidance explains how to check update status. If an update fails, record the message rather than repeatedly toggling protection.

Update failures can also reflect a connection problem. If Windows shows a network warning, check what “No internet, secured” means on Windows 10 before treating a failed download as an antivirus fault.

Restore your chosen antivirus provider

Choose the branch that matches the protection you intend to use. Check installed apps for another antivirus suite or an old trial, since leftover installations can complicate the handover. Do not remove security software from a work-managed computer without consulting your IT team.

If you want to keep Norton

1. Open Norton and follow the action attached to its protection warning. Some interfaces offer a Fix Now button.
2. If Auto-Protect was paused, enable it. Where available, right-click the Norton icon in the taskbar notification area and choose Enable Auto-Protect. Norton documents this control; labels can vary between interfaces.
3. Check whether a subscription or activation problem needs resolving. Follow the instructions in your Norton account or app.
4. Uninstall any separate antivirus suite you no longer intend to use through Windows Settings, then restart. Keep Norton installed while testing this branch.
5. Confirm that Norton reports active protection and that Windows Security recognises it as the antivirus provider.

If Norton cannot start or repair itself, follow Norton's official removal and reinstallation instructions for your installed product. Obtain installers and removal tools from Norton directly. After reinstalling, check activation, updates and real-time protection again.

If you want to use Microsoft Defender

Defender is built into Windows; you do not normally uninstall it and download a replacement. On an unmanaged personal PC, removing the third-party antivirus should allow it to resume protection.

1. Uninstall Norton through the installed apps section of Windows Settings. Follow its removal prompts and restart.
2. Open Windows Security, then Virus & threat protection. Check whether Microsoft Defender Antivirus is active.
3. If available, select Manage settings under Virus & threat protection settings and turn Real-time protection on.
4. Check for protection updates from the Virus & threat protection page, then confirm that no action remains outstanding.

If Norton remains listed after removal, use Norton's official removal guidance. If settings are greyed out or marked as managed by your organisation, ask the administrator to check the policy. Avoid registry edits intended to force antivirus settings.

Investigate protection that switches off again

Repeated disabling can result from damaged software, management policies, conflicting installations or malware. The warning alone does not identify the cause.

Once your chosen antivirus works, update it and run a full system scan. Follow its recommended quarantine or removal actions, restart if requested and review any unresolved detections.

If Defender is active and you suspect persistent malware, open Virus & threat protection, select Scan options and choose Microsoft Defender Antivirus (offline scan). Save your work first: it restarts the PC to scan outside the usual Windows session. Review Protection history afterwards. Microsoft's scan guidance explains the available scan types.

If neither antivirus can run, seek support rather than assuming a scan has completed. Microsoft Safety Scanner is another official on-demand malware scanning option, but it does not replace continuous antivirus protection. Disconnect from the network if you see suspicious activity while protection is unavailable.

Check the source of any error before following a repair guide. An event mentioning Security-SPP concerns a different component: Microsoft Windows Security SPP relates to software licensing, rather than being the antivirus engine.

Verify the repair before resuming normal use

• Your chosen antivirus reports that real-time protection is enabled.
• Windows Security identifies the expected antivirus provider.
• Protection updates complete successfully.
• A scan completes and any detected threats receive the recommended action.
• Protection remains active after a restart.

If these checks fail, give Norton support, Microsoft support or your IT administrator the exact error, recent software changes and steps already attempted. The Windows security guides can help with a separate warning that remains after antivirus protection is restored.

Open Windows Security now and check which antivirus provider it reports as active.