How To Clear Windows Security Protection History Logs Manually
Clearing your Windows Security protection history logs manually requires you to turn off a built-in safety feature called Tamper Protection in Windows 11 and Windows 10. Windows keeps these security logs locked to stop malicious software from deleting them, which means you cannot simply throw the old files in the recycle bin .
You need to use an administrator account on your PC to change this setting and access the hidden folder located at 📁C:\
Turn off Tamper Protection in Windows Security settings, then open File Explorer and navigate to 📁C:\
Step-by-Step Guide: How to Clear Protection History Manually
Follow these step-by-step instructions carefully to clear your protection history. We will break this down into three main phases: turning off tamper protection, locating and deleting the log files, and turning your security features back on.
Phase 1Temporarily Turn Off Tamper Protection
Temporarily turning off tamper protection in Windows Security is required before you can manually clear your protection history logs. Windows blocks access to these security files by default to protect your computer from unauthorized changes. You can easily switch this setting off through the Windows Security app if you are logged in as an administrator.
- Click the Start button on your taskbar and type Windows Security, then press Enter.

- In the Windows Security window, click on Virus & threat protection on the left side of the screen.
- Look under the virus and threat protection settings heading and click the Manage settings link.

Windows Security › Virus & threat protection - Scroll down until you find the setting called Tamper Protection.

- Click the switch to turn it Off. A pop-up window from User Account Control may appear asking if you want to allow this app to make changes to your device. Click Yes.
Phase 2Locate and Delete the History Files
Locating and deleting Windows Security protection history files requires opening the hidden system folders on your main hard drive. Once you turn off tamper protection, you can access the specific directory where Windows stores past threat logs and remove them manually to clear your notification history.
- Open the File Explorer by clicking the folder icon on your taskbar or pressing the Win+E on your keyboard.

- Click on your main hard drive, which is usually called Local Disk C:.
- Navigate to the following folder path: 📁C:\
ProgramData\ . If you cannot see the ProgramData folder, click on the View menu at the top of File Explorer , select Show, and check the box next to Hidden items.Microsoft\ Windows Defender\ Scans\ History - Open the Service folder inside the History folder.
- Select all the files and folders inside the Service folder. You can do this quickly by pressing Ctrl+A on your keyboard.
- Right-click the selected items and choose Delete. If a warning pops up saying you need permission from the system, confirm that you want to proceed.
Phase 3Turn Tamper Protection Back On
Turning tamper protection back on immediately after clearing your logs keeps your computer safe from malware and unwanted system changes. You should always re-enable this core security setting through the Windows Security app as soon as you finish deleting the old history files to keep your device fully protected.
- Go back to the Windows Security app by searching for it in your Start menu.
- Click on Virus & threat protection and then click Manage settings.
- Find Tamper Protection and click the switch to turn it back On.

- Close the Windows Security window and restart your computer to finish the process.
Alternative Method: Clearing Protection History via PowerShell
Clearing Windows Security protection history using PowerShell provides a fast, text-based alternative to deleting files manually through File Explorer. Running a few simple commands with administrator rights lets you automate the process of wiping out stubborn threat logs without digging through hidden folders.
- Click the Start button, type PowerShell, right-click on Windows PowerShell in the search results, and choose Run as administrator.

- Click Yes on the prompt asking for permission to make changes to your computer.
- Type or copy and paste the following command into the PowerShell window, then press Enter:
Remove-Item -Path "C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\*" -Recurse -Force
- Once the command runs successfully, close the PowerShell window.
- Remember to turn Tamper Protection back on in your Windows Security settings following the steps outlined in Phase 3 above.

Expert Tips for Managing Stubborn Windows Security Logs
Managing stubborn Windows Security logs that refuse to delete usually involves updating your operating system or restarting background security services. When threat history files keep coming back or blocking deletion, applying the latest Windows updates and restarting your computer often fixes the underlying software glitches.
First, always ensure your operating system is fully updated. Microsoft frequently releases patches that fix bugs within Windows Security and its logging services. If a specific bug is causing old scan results to repeat indefinitely on your screen, a simple system update often resolves the issue entirely.
Summary
Clearing Windows Security protection history logs manually gives you a reliable way to remove old, annoying threat alerts that Windows refuses to delete on its own. By temporarily turning off tamper protection, opening the hidden system folders, and deleting the log files, you can successfully clean up your security history.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!