Configuration and hardening tool for Microsoft Defender
Windows 11 Pro · Build 26200
Current Microsoft Defender state
A snapshot of what Microsoft Defender is doing on this PC right now.
Real-time protection
Enabled
Tamper Protection
On
Notifications
Allowed
Registered as AV
Microsoft Defender
Choose a hardening profile
Pick a policy profile for Microsoft Defender. You can change this anytime.
Balanced
Keeps Microsoft Defender active with recommended hardening. Notifications silenced.
RECOMMENDED
TreeIQ Primary
Guides you to hand real-time protection to TreeIQ Anti-Malware. Microsoft Defender stays available for on-demand scans.
Reset to Windows defaults
Remove all hardening. Microsoft Defender goes back to normal. (This also happens automatically on uninstall.)
Ready to harden?
The Setup Wizard walks you through everything step by step. Takes about 2 minutes.
TreeIQ Harden is an independent third-party configuration utility. It is not affiliated with, endorsed by, or sponsored by Microsoft Corporation. Microsoft, Windows, and Microsoft Defender are trademarks of Microsoft Corporation.
1Welcome
2Tamper Off
3Review
4Apply
5Done
TreeIQ Harden is an independent third-party configuration utility. It is not affiliated with, endorsed by, or sponsored by Microsoft Corporation. Microsoft, Windows, and Microsoft Defender are trademarks of Microsoft Corporation.
Advanced settings
Individual Defender policies. Changes apply immediately. Undo anytime with the Reset preset.
Real-time Protection5 policies
Disable real-time protection
Turns off Defender's always-on file scan.
Disable behavior monitoring
Turns off Defender's process behavior heuristics.
Disable script scanning
Turns off Defender's script content inspection.
Disable IOAV protection
Turns off downloaded-file scanning at write time.
Notifications2 policies
Disable Defender notifications
Stops all pop-up toasts from Windows Security.
Disable enhanced notifications
Stops recommendation banners in Windows Security.
Cloud & Reporting2 policies
Disable Cloud Delivered Protection (MAPS)
Stops Defender from sending telemetry + file hashes to Microsoft cloud.
Disable Automatic Sample Submission
Stops Defender from uploading suspicious files to Microsoft for analysis.
Exclusions2 policies
TreeIQ paths excluded
Defender ignores C:\Program Files\TQAV and %ProgramData%\JR-AV.
TreeIQ processes excluded
Microsoft Defender ignores TQKrn.exe, TQAM.exe, TQMon.exe.
TreeIQ Harden is an independent third-party configuration utility. It is not affiliated with, endorsed by, or sponsored by Microsoft Corporation. Microsoft, Windows, and Microsoft Defender are trademarks of Microsoft Corporation.