.. Windows Updates happen.
After going through my older stuff to new stuff I forgot you can just uninstall the Default Definitions for Windows Defender and it makes it 'dumb' until you update the clean install
Here is how.
1 - Mount the win 10 image or win 11 image with read and write permissions
2 - Run DISM get features for the image that is mounted
Get_Features.cmd
3 - After you find that Windows-Defender-Default-Definitions is Enabled, use a remove cmd line like so ( this will not remove Windows Defender, it just makes it dumb until windows is updated )
Remove_WD_Default_Definitions.cmd
4 - If all is good, Commit image and save , then export the image out to clean it up from the [DELETED] folder that is left.
5 - Test in a VM for if Windows Defender is intact but dumb for the moment.
Screenshot of both Win 10 and Win 11 with Definitions Enabled ( Note both use the same name so 1 .cmd can do both on removal of the Definitions )
Win 10:
Win 11:
This allows you to run scripts that normally would possibly get flagged by Windows Defender, may not work in all case use but it does for me.
I use this to remove Windows Defender as it is dumb and will not remove my scripts
After going through my older stuff to new stuff I forgot you can just uninstall the Default Definitions for Windows Defender and it makes it 'dumb' until you update the clean install
Here is how.1 - Mount the win 10 image or win 11 image with read and write permissions
2 - Run DISM get features for the image that is mounted
Get_Features.cmd
Code:
DISM.exe /Image:C:\my_mounted_wim /Get-Features /Format:List >C:\DISM_List_Features.txt
Pause3 - After you find that Windows-Defender-Default-Definitions is Enabled, use a remove cmd line like so ( this will not remove Windows Defender, it just makes it dumb until windows is updated )
Remove_WD_Default_Definitions.cmd
Code:
Dism /Image:C:\my_mounted_wim /Disable-Feature /FeatureName:Windows-Defender-Default-Definitions /Remove
Pause4 - If all is good, Commit image and save , then export the image out to clean it up from the [DELETED] folder that is left.
5 - Test in a VM for if Windows Defender is intact but dumb for the moment.
Screenshot of both Win 10 and Win 11 with Definitions Enabled ( Note both use the same name so 1 .cmd can do both on removal of the Definitions )
Win 10:
Win 11:
This allows you to run scripts that normally would possibly get flagged by Windows Defender, may not work in all case use but it does for me.
I use this to remove Windows Defender as it is dumb and will not remove my scripts
Last edited: