The most secure Windows ever

Windows 10 provides comprehensive, built-in protection—at no extra cost. 1 Learn how Windows Hello facial recognition and biometric logins, coupled with comprehensive antivirus protection, keep you more secure than ever.

Microsoft Defender Antivirus

Formerly known as Windows Defender, Microsoft Defender Antivirus still delivers the comprehensive, ongoing, and real-time protection you expect against software threats like viruses, malware, and spyware across email, apps, the cloud, and the web.

Always on defense—at no extra cost

No need to download—Microsoft Defender comes standard on Windows 10, protecting your data and devices in real time with a full suite of advanced security safeguards. 1

Files are secured and accessible across devices

Save your files to OneDrive to keep them protected, backed up, and accessible from all your devices, anywhere.

You manage your privacy

Set your location, camera, and data usage options in the easy-to-access account settings panel.

Help keep your family safer online

With Windows 10, schedule screen time, limit access to mature content, and restrict online purchases, including apps, games, and movies. 2

Say goodbye to passwords with Windows Hello

Windows Hello logs you in 3x faster than a password. 4 Use your camera to recognize your face or try your fingerprint reader. 3 You can always keep your PIN as a backup.

Sign in your way

Enabling Windows Hello turns on sign-in with your face or fingerprint. 3 Login faster and more securely to your laptop, tablet, device, app, or even websites; you can even make in-app purchases.

Windows Hello enabled apps

Windows Hello works with compatible apps like iHeartRadio and Dropbox, so you can bypass the password and breeze right through with facial recognition biometric security. 3

Your companion devices unlock your PC

Windows Hello lets you use your digital wristband, smart watch, phone, and other companion devices to quickly unlock your Windows 10 PC without using a password. 5

Prevent PC updates from interrupting your workflow

Windows 10 provides new features and security updates for free on an ongoing basis. Now you have the option to update when it’s convenient for you.

You’re in control with searching, streaming, and gaming

Set parameters with Ask a Parent tool 6

If your kids want more screen time or to purchase a game, app, or movie, you can require them to request your permission first.

Get things done securely and quickly on the web

Microsoft Edge and Bing feature built-in learning tools, 4K 7 streaming, and advanced cyber protections—all optimized for Windows 10.

Sync your files with OneDrive Learn how to store and access files across devices with OneDrive. Watch step by step how to set-up, sync and access files on your iOS, Andriod and Windows devices.

Share and edit files in OneDrive

Save files to OneDrive to keep them protected, backed up, and accessible from your iOS, Android, and Windows devices, virtually anywhere. 8 Even offline.

Security and privacy you can count on

Privacy starts with putting you in control. You should have the tools and information to make informed choices. You can manage your data saved to the cloud.

Find My Device

Find My Device is a feature that can help you locate your Windows 10 device if it’s lost or stolen. It works for any Windows device, such as a PC, laptop, Surface, or Surface Pen.

1 For the supported lifetime of the device. Internet access fees may apply.

2 Requires a Microsoft family account with Device health sharing permissions enabled.

3 Windows Hello requires specialized hardware including a Windows Hello capable device, fingerprint reader, illuminated IR sensor or other biometric sensors and capable devices.

4 Based on average time comparison between typing a password respectively detecting a face or fingerprint to authentication success.​

5 Available for selected companion devices and selected Windows 10 editions. Might require that PC and companion devices are joined in Azure Active Directory or Active Directory and paired via Bluetooth.

6 Requires a Microsoft family account with Device health sharing permissions enabled. Also requires Android devices with Microsoft Launcher installed and signed in with the same Microsoft account associated with their Microsoft family account. For a parent to access and view a child’s locations and app activities through the Family web page, Microsoft Launcher must be installed on each child’s device. For a parent to access and view their child’s location(s) and app activities through Microsoft Launcher, Microsoft Launcher must be installed on both the parent’s device and each child’s device. In each case, location and app usage permissions must be allowed through Microsoft Launcher on the child’s device. Activity reporting features require Android 5.0+ on each child’s device. Family settings available on Windows 10 and Xbox One devices. Some settings available on Android devices with Microsoft Launcher installed. Family settings work on the Microsoft Edge browser only.

7 4K Ultra HD exclusivity is limited to PCs running Windows 10. 4K works in both Microsoft Edge and Netflix app. Only 7th Gen Intel® Core™ processor or higher devices can decrypt PlayReady 4K DRM. Netflix Ultra HD plan required. Requires Dolby Vision-supported PlayReady content and capable hardware.

8 Internet access may be required. Fees may apply.

How to enable and use the built in Windows Defender for Antivirus Protection in Windows 10

Technical Level : Basic

Update: Starting with Windows 10 Creators Update and later versions, Windows Defender has been succeeded by a new security client called Windows Defender Security Center. Windows Defender Security Center includes a suite of protection tools for your Windows 10 device, these include: Antivirus, Performance, Firewall, App and Browser Control and Family Safety.

This also means, users don’t need uninstall third party Antivirus products compatible with Windows 10. Third party Antivirus utilities can co-exist with Windows Defender Security Center just fine. If you are running an older release of Windows 10, such as 1607 and earlier, you can follow the instructions below for enabling your third party Antivirus utility.

Summary — Enabling Windows Defender on Older Releases of Windows 10

Windows 10 might require a new version of your Antivirus designed for Windows 10. If you have a subscription that has not expired, contact the developer to find out about Windows 10 support. Most Antivirus utilities should now support Windows 10. If your subscription is still active, then you should be entitled to a compatible update for Windows 10. If your current Antivirus is incompatible with Windows 10 or you do not plan to renew your subscription, you can use the built in Windows Defender or Windows Defender Security Center as an alternative. Lets take a quick look at enabling and updating Windows Defender.

Details

Press Windows key + X

Click Programs and Features

Select the Antivirus utility you have installed, then click Uninstall/Change. You might have a different one installed, I have Norton for example.

This will launch the setup wizard which will guide you through uninstalling your Antivirus. Follow the on screen instructions, a reboot might be required.

During the uninstallation, you might receive a notification indicating virus protection is turned off. You can use this opportunity to enable Windows Defender right away. If not, follow the next steps to enable it yourself manually.

Click Start
Click Settings or press Windows key + i
Click Click Update & Security

Click Windows Defender

Make sure Real-time protection is enabled

Windows Defender should automatically turn on and prompt you update. Do so right away, as the definitions tend to be out of date by many months or years (depending on when you install Windows 10).

That’s it, you now have a free built in Antivirus utility you don’t have to pay for.

Configure and run on-demand Microsoft Defender Antivirus scans

Applies to:

You can run an on-demand scan on individual endpoints. These scans will start immediately, and you can define parameters for the scan, such as the location or type.

Quick scan versus full scan

Quick scan looks at all the locations where there could be malware registered to start with the system, such as registry keys and known Windows startup folders.

Microsoft Defender Antivirus runs in the context of the LocalSystem account when performing a local scan. For network scans, it uses the context of the device account. If the domain device account doesn’t have appropriate permissions to access the share, the scan won’t work. Ensure that the device has permissions to the access network share.

Combined with always-on real-time protection capability—which reviews files when they’re opened and closed, and whenever a user navigates to a folder—a quick scan helps provide strong coverage both for malware that starts with the system and kernel-level malware.

In most instances, a quick scan is adequate to find malware that wasn’t picked up by real-time protection.

A full scan can be useful on endpoints that have reported a malware threat. The scan can identify if there are any inactive components that require a more thorough clean-up. This is ideal if your organization is running on-demand scans.

By default, quick scans run on mounted removable devices, such as USB drives.

Use Microsoft Endpoint Manager to run a scan

1. Go to the Microsoft Endpoint Manager admin center (https://endpoint.microsoft.com) and log in.
2. Choose Endpoint security >Antivirus.
3. In the list of tabs, select Windows 10 unhealthy endpoints.
4. From the list of actions provided, select Quick Scan or Full Scan.

For more information about using Microsoft Endpoint Manager to run a scan, see Antimalware and firewall tasks: How to perform an on-demand scan.

Use the mpcmdrun.exe command-line utility to run a scan

Use the following -scan parameter:

For more information about how to use the tool and additional parameters, including starting a full scan, or defining paths, see Use the mpcmdrun.exe commandline tool to configure and manage Microsoft Defender Antivirus.

Use Microsoft Intune to run a scan

1. Go to the Microsoft Endpoint Manager admin center (https://endpoint.microsoft.com) and log in.
2. From the sidebar, select Devices > All Devices and choose the device you want to scan.
3. Select . More. From the options, select Quick Scan or Full Scan.

Use the Windows Security app to run a scan

See Run a scan in the Windows Security app for instructions on running a scan on individual endpoints.

Use PowerShell cmdlets to run a scan

Use the following cmdlet:

For more information on how to use PowerShell with Microsoft Defender Antivirus, see Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus and Defender cmdlets.

Use Windows Management Instruction (WMI) to run a scan

Use the Start method of the MSFT_MpScan class.

For more information about which parameters are allowed, see Windows Defender WMIv2 APIs