Windows defender

[waxLyrical]

Is there any value in keeping windows defender if we have MBytes Endpoints installed? I see no options in Neblua to disable it?

[exile360]

Greetings,

Yes, since you will benefit from the protection of both applications.  That said, if Malwarebytes is configured to register with the Security Center, Defender should disable itself automatically; at least that's how it works for the consumer version.

[waxLyrical]

HI Exhile - thanks for your reply. This is the business version, and Defender seems unaware of MWBytes?

[exile360]

It sounds as though the business version doesn't register with the Security Center by default, though you can check the settings in Malwarebytes to see.  In the consumer version there is an option to control whether Malwarebytes registers with the Windows Security Center located under the General tab in settings and if the business version has the ability to register with the Windows Security Center there is likely an option for it somewhere in the UI and/or policy (if using the managed version).

[knguyen1]

Hi @waxLyrical

Thank you for contacting Malwarebytes Business Support. 

In Nebula, you would go to Settings -> Policies -> Select the policy you wish to edit -> Settings (Next to General) -> Windows Action Center -> Change it to Always Register if necessary.

Thank you, 

[AGrima]

On 7/6/2020 at 8:20 PM, knguyen1 said:

Hi @waxLyrical

Thank you for contacting Malwarebytes Business Support. 

In Nebula, you would go to Settings -> Policies -> Select the policy you wish to edit -> Settings (Next to General) -> Windows Action Center -> Change it to Always Register if necessary.

Thank you, 

Hi @knguyen1,

But this doesn't disable Windows Defender, correct?

Thanks in advance.

[exile360]

58 minutes ago, AGrima said:

But this doesn't disable Windows Defender, correct?

I believe it depends on the Windows version; in current builds of Windows 10, Windows Defender disables itself if another application registers as virus protection in the Windows Action Center.

[AGrima]

1 minute ago, exile360 said:

I believe it depends on the Windows version; in current builds of Windows 10, Windows Defender disables itself if another application registers as virus protection in the Windows Action Center.

Hi @exile360,

Thanks for your reply.

We have a client that has Windows 10 PCs and, when they installed Malwarebytes EP, Windows Defender wasn't disabled. However, to be honest, I don't know which Windows 10 builds they have installed.

So, if they have the current build (I guess you're referring to v2004, right?) and they modify the policy as per @knguyen1's post, Windows Defender will disable itself?

[exile360]

Yes, I believe that to be accurate.  I suspect that the default is not to register in the Action Center for Endpoint Protection, though a staff member would need to verify that, and as for Windows versions, I believe it is also true of the build prior to the latest 2004 (1909 if I recall correctly) and I believe it was that prior build that Microsoft implemented the change.

[AGrima]

2 minutes ago, exile360 said:

Yes, I believe that to be accurate.  I suspect that the default is not to register in the Action Center for Endpoint Protection, though a staff member would need to verify that, and as for Windows versions, I believe it is also true of the build prior to the latest 2004 (1909 if I recall correctly) and I believe it was that prior build that Microsoft implemented the change.

Thank you, @exile360.

@knguyen1, could you please confirm this, so that we inform our client?

[knguyen1]

Hello @AGrima

For me at least, I'm on Windows 10 Build 1909 and my Nebula setting is set to default. It should register with Windows Security Center and Windows Defender typically automatically disables itself when another AV is detected. Though I'm not too familiar with what Windows may be changing on their end between 1909 and 2004, but I can confirm on my system is still works the way it has been. 

You can go to iptest.malwarebytes.com as a test to ensure Malwarebytes is protecting the machine. Unfortunately in Nebula we don't have much we can change other than that Windows Action Center setting, so there may be some lingering setting in Windows that is causing the machine to not see that Malwarebytes is installed. 

Thank you, 

[AGrima]

Hello @knguyen1,

Ok, all noted - thank you for your feedback.

[AdvancedSetup]

@AGrima

Please see the following concerning how Windows Defender operates

Microsoft Defender Antivirus compatibility

 

[AGrima]

Thank you, @AdvancedSetup - appreciated.