How To Check Windows Security Protection Status In Settings

Use the Windows Security app to check the status of Microsoft Defender Antivirus

Open Windows Security in your settings menu to check if Microsoft Defender Antivirus is running and your virus definitions are up to date. This built-in security dashboard shows you real-time protection status and alerts you immediately if your PC needs attention, without needing any extra software.

1. Open Settings ⚙️ by pressing the Win and the I key simultaneously.

   

2. Select Privacy & security from the left-hand menu.

   

3. Click on Windows Security.

   

4. Click the Open Windows Security button.
5. Click on Virus & threat protection to view current scan statuses, threat history, and active protection toggles.

   

Use PowerShell to check the status of Microsoft Defender Antivirus

Run a simple command in Windows PowerShell to check the exact operational status of Microsoft Defender Antivirus and its background services. This command-line method gives you a detailed report on your malware protection state without clicking through graphical menus.

1. Press the Win, type PowerShell, right-click Windows PowerShell, and select Run as administrator.
2. Type the command

   Get-MpComputerStatus

   and press Enter.
3. Review the output rows, locating properties such as AntivirusEnabled, RealTimeProtectionEnabled, and AntispywareEnabled to verify that each security vector displays a True status.

Current threats

Check the current threats section in Windows Security to view active malware alerts, quarantine details, and files requiring your immediate action. This area shows suspicious items found on your PC so you can review them, restore safe files, or remove dangerous threats permanently.

Scan options

Choose from quick, full, custom, or offline scan options in Windows Security to run a manual check for viruses based on your needs. Quick scans check common hiding spots, full scans check every file, and offline scans remove stubborn malware before Windows boots.

Allowed threats

The allowed threats section lists items that the system previously flagged as malicious but that you chose to permit on your computer. You can review this list to ensure no harmful software retains an exception rule that bypasses real-time defense checks.

Virus & threat protection settings

You can adjust the core defense behaviors and underlying protective layers that govern how the operating system handles incoming files and potential exploits.

Real-time protection

Real-time protection continuously monitors your file system, scanning downloads and running programs instantly as they interact with your machine. Keeping this toggle active ensures that newly encountered malware is intercepted before it can execute or modify system files.

Dev Drive protection

Dev Drive protection configures customized performance scanning rules specifically for developer volumes optimized for building and compiling code. This feature balances heavy file input and output operations with necessary security oversight.

Cloud-delivered protection

Cloud-delivered protection shares diagnostic data with cloud services to identify brand-new malware strains almost instantly. Enabling this option ensures your machine benefits from rapid threat intelligence updates gathered globally.

Automatic sample submission

Automatic sample submission uploads suspicious files to cloud analysis servers to help identify unknown threats and improve global protection standards. You can configure this setting to prompt you before sending files or to handle submissions automatically.

Tamper protection

Tamper protection prevents unauthorized apps and malicious scripts from altering core security settings, disabling real-time monitoring, or modifying critical defense files. This acts as an internal safeguard to ensure your defensive posture remains locked against modification attempts.

Controlled folder access

Controlled folder access protects valuable directories and personal files from unauthorized changes made by rogue applications or ransomware scripts. You can add trusted programs to an exclusion list so they retain permission to modify protected user folders.

Exclusions

The exclusions list defines specific files, folders, file types, or running processes that the system ignores during routine security scans. You add items here only when legitimate software experiences false positive detections or performance conflicts during normal operation.

Virus & threat protection updates

Your security definitions require regular updates to recognize newly created malware strains and zero-day vulnerabilities. You can check the current update version date and manually initiate a definition download to ensure your database matches the latest threat intelligence releases.

Ransomware protection

Ransomware protection shields your irreplaceable files from being encrypted and held hostage by malicious actors.

Controlled folder access

Controlled folder access acts as a primary defense barrier by restricting write access to standard user directories. Only authorized applications can modify documents, pictures, and desktop files when this feature is active.

Ransomware data recovery

Ransomware data recovery integrates with cloud storage accounts like OneDrive to help you recover files if an encryption attack successfully breaches your system. You can set up and manage your cloud backup synchronization directly through this panel to guarantee data recoverability.

Web Protection and SmartScreen Verification

Check your web protection and SmartScreen settings to make sure Microsoft Edge blocks malicious websites and phishing links before they load. Verifying these security filters adds an extra layer of defense against dangerous downloads and fraudulent pages while you browse the web.

1. Open Microsoft Edge, click the three dots in the top-right corner, and select Settings.
2. Click Privacy, search, and services from the left sidebar menu.
3. Scroll down to the Security section and verify that the toggle switch for Microsoft Defender SmartScreen is turned on.
4. Check the Windows Security app under App & browser control to confirm that reputation-based protection and exploit guard settings are fully enabled across the operating system.

Verify System Security via Registry Policies

Check your Windows Registry keys to confirm that system policies are not overriding your security center notifications and core protection features. Reviewing these settings ensures your local security controls function properly without unwanted external interference.

1. Press the Windows key and the R key together to open the Run dialog box.
2. Type

   regedit

   and press Enter to open the Registry Editor.
3. Navigate to the following location:
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender Security Center\Settings
4. Review the available DWORD values in the right-hand pane to check custom configuration states applied to your security dashboard notifications and options.

If this didn't work

Repair corrupted Windows system files using the System File Checker tool if your security dashboard keeps showing errors or incorrect statuses. Running this quick command in Command Prompt replaces damaged components and restores your security app back to normal operation.

sfc /scannow

to automatically detect and replace corrupted system files. Once the scan finishes and you restart your computer, open the Windows Security app again to confirm that protection statuses display correctly.