How to Turn On or Off Cloud Protection for Microsoft Defender Antivirus in Windows 11

Option 1Turn On or Off Cloud Protection Using Windows Security

1. Click the Start button or press the Windows key, then open Windows Security.
2. Click on Virus & threat protection.

Within the Windows Security app, you can manage Windows Defender cloud protection. This feature sends threat information to Microsoft’s cloud, helping to protect your computer from new dangers more quickly. The setting is accessible and adjustable within the app.

3. Under Virus & threat protection settings, click Manage settings.

Within the Windows Security app, you can manage Windows Defender cloud protection. This feature sends threat information to Microsoft’s cloud, helping to protect your computer from new dangers more quickly. The setting is accessible and adjustable within the app.

4. Find Cloud-delivered protection and toggle it On (recommended) or Off.

You can now close Windows Security.

Option 2Turn On or Off Cloud Protection Using Commands

1. Open Windows Terminal (Admin). You can choose either PowerShell or Command Prompt inside the terminal.
2. Type or paste one of the commands below and press Enter to run it.

To Turn On Cloud Protection (Default)

PowerShell Set-MpPreference -MAPSReporting 2

or

PowerShell Set-MpPreference -MAPSReporting Advanced

To Turn Off Cloud Protection

PowerShell Set-MpPreference -MAPSReporting 0

or

PowerShell Set-MpPreference -MAPSReporting Disabled

Close Windows Terminal when finished.

Option 3Enable or Disable Cloud Protection Using Local Group Policy Editor

Please note: The Local Group Policy Editor is only available on Windows 11 Pro, Enterprise, or Education editions.

1. Press Windows + R, type gpedit.msc, and press Enter to open the Local Group Policy Editor.
2. Navigate to:
   
   Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > MAPS

To Enable Cloud Protection

Set the policy to 'Not Configured' (this is the default). This allows you to use Options 1 and 2 to manage cloud protection.

To Disable Cloud Protection

Setting the Microsoft Defender Antivirus cloud protection policy to 'Enabled' actually disables cloud protection. This setting also blocks users from changing Options 1 and 2, preventing accidental changes to the security configuration.

Close the Group Policy Editor when done.

Option 4Enable or Disable Cloud Protection Using the Registry

A word of caution: Editing the registry can lead to issues if not done carefully. It's a good idea to back up your registry before making any changes.

To Enable Cloud Protection (Default)

reg delete "HKLMSOFTWAREPoliciesMicrosoftWindows DefenderSpynet" /v SpynetReporting /f

To Disable Cloud Protection

reg add "HKLMSOFTWAREPoliciesMicrosoftWindows DefenderSpynet" /v SpynetReporting /t REG_DWORD /d 0 /f

After making changes, restart your computer for them to take effect.

Summary

• Cloud-delivered protection helps Microsoft Defender find new threats quickly by using online cloud technology.
• You can turn this feature on or off using Windows Security, Commands, Group Policy Editor, or the Registry.
• Make sure you are an administrator to change these settings.
• Choose the method that feels easiest or most comfortable for you.
• Keep your antivirus protection up to date to stay safe from new threats.

Microsoft Defender's cloud protection leverages online technology to quickly identify and neutralize new threats. You can manage this feature by turning it on or off using Windows Security, Commands, Group Policy Editor, or the Registry, provided you have administrator rights.