How to Turn On or Off Cloud Protection for Microsoft Defender Antivirus in Windows 11
Cloud protection for Microsoft Defender Antivirus in Windows 11 uses Microsoft’s online services to spot and stop threats as they happen. This security feature provides a vital real-time shield against new and rapidly spreading malware.
Microsoft Defender Cloud-based Protection, as it’s also known, taps into the latest threat intelligence from Microsoft’s vast network. This helps it catch dangers that haven’t yet been added to your PC’s standard security list.
Turning on cloud protection means you get super-fast detection for the newest online dangers. Microsoft Defender can identify brand-new malware, like ransomware variants, within minutes of them appearing online.
Open Windows Security, go to Virus & threat protection, click Manage settings, and toggle Cloud-delivered protection On or Off. Alternatively, use Windows Terminal commands or Group Policy Editor to manage this setting.
Option 1Turn On or Off Cloud Protection Using Windows Security
- Click the Start button or press the Windows key, then open Windows Security.
- Click on Virus & threat protection.

Within the Windows Security app, you can manage Windows Defender cloud protection. This feature sends threat information to Microsoft’s cloud, helping to protect your computer from new dangers more quickly. The setting is accessible and adjustable within the app.
- Under Virus & threat protection settings, click Manage settings.

Within the Windows Security app, you can manage Windows Defender cloud protection. This feature sends threat information to Microsoft’s cloud, helping to protect your computer from new dangers more quickly. The setting is accessible and adjustable within the app.
- Find Cloud-delivered protection and toggle it On (recommended) or Off.

You can now close Windows Security.
Option 2Turn On or Off Cloud Protection Using Commands
- Open Windows Terminal (Admin). You can choose either PowerShell or Command Prompt inside the terminal.
- Type or paste one of the commands below and press Enter to run it.
To Turn On Cloud Protection (Default)
PowerShell Set-MpPreference -MAPSReporting 2or
PowerShell Set-MpPreference -MAPSReporting AdvancedTo Turn Off Cloud Protection
PowerShell Set-MpPreference -MAPSReporting 0or
PowerShell Set-MpPreference -MAPSReporting DisabledClose Windows Terminal when finished.
Option 3Enable or Disable Cloud Protection Using Local Group Policy Editor
Please note: The Local Group Policy Editor is only available on Windows 11 Pro, Enterprise, or Education editions.
- Press Windows + R, type
gpedit.msc, and press Enter to open the Local Group Policy Editor. - Navigate to:
Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > MAPS

To Enable Cloud Protection
Set the policy to ‘Not Configured’ (this is the default). This allows you to use Options 1 and 2 to manage cloud protection.
To Disable Cloud Protection
Setting the Microsoft Defender Antivirus cloud protection policy to ‘Enabled’ actually disables cloud protection. This setting also blocks users from changing Options 1 and 2, preventing accidental changes to the security configuration.
Close the Group Policy Editor when done.
Option 4Enable or Disable Cloud Protection Using the Registry
A word of caution: Editing the registry can lead to issues if not done carefully. It’s a good idea to back up your registry before making any changes.
To Enable Cloud Protection (Default)
reg delete "HKLMSOFTWAREPoliciesMicrosoftWindows DefenderSpynet" /v SpynetReporting /fTo Disable Cloud Protection
reg add "HKLMSOFTWAREPoliciesMicrosoftWindows DefenderSpynet" /v SpynetReporting /t REG_DWORD /d 0 /fAfter making changes, restart your computer for them to take effect.
Summary
- Cloud-delivered protection helps Microsoft Defender find new threats quickly by using online cloud technology.
- You can turn this feature on or off using Windows Security, Commands, Group Policy Editor, or the Registry.
- Make sure you are an administrator to change these settings.
- Choose the method that feels easiest or most comfortable for you.
- Keep your antivirus protection up to date to stay safe from new threats.
Microsoft Defender’s cloud protection leverages online technology to quickly identify and neutralize new threats. You can manage this feature by turning it on or off using Windows Security, Commands, Group Policy Editor, or the Registry, provided you have administrator rights.
Is Microsoft Defender for Cloud needed?
Yes. Azure Security Center was renamed Microsoft Defender for Cloud in 2021 to better reflect its expanded capabilities and support for protecting hybrid and multicloud environments.
Is Microsoft Defender for Cloud free?
Defender for Cloud helps you protect resources across Azure, other clouds, and on-premises through its Free tier and enhanced security capabilities.
How to enable cloud-based protection in Windows defender?
Go to Endpoint security > Antivirus > Create policy. Under Platform, select Windows 10 and later. Under Profile, select Microsoft Defender Antivirus. Enable or disable Cloud-delivered protection, configure Sample submission, and set Cloud block level.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!