How to Optimize Microsoft Defender CPU Usage in Windows 11
Limiting Microsoft Defender CPU usage in Windows 11 stops background virus scans from slowing down your computer. Microsoft Defender is the built-in security tool that checks your PC for viruses and malware.
Security scans often use a lot of processing power and make heavy tasks like gaming feel sluggish. You can change these settings to free up system power while keeping your PC safe from threats.
Adjust Microsoft Defender’s CPU usage by opening PowerShell as administrator and using the `Set-MpPreference -ScanAvgCPULoadFactor ` command. Alternatively, for Pro/Enterprise editions, use the Local Group Policy Editor under Windows Components.
What is Microsoft Defender Antivirus?
Microsoft Defender Antivirus provides default threat protection for Windows 11 by analyzing files on the fly.
Active sweeps occasionally spike hardware utilization past 50%. Capping that threshold prevents system slowdowns during intensive tasks, though tighter constraints mean scans take longer to finish.
Why Would You Want to Change This?
Limiting resource consumption keeps the desktop responsive while security checks run in the background. Multitasking remains smooth even during a deep system inspection.
How to Change CPU Usage During Scans
Three distinct methods allow administrators to adjust how much muscle Defender flexes during analysis:
1Using PowerShell (Easy for Everyone)
PowerShell offers a quick command-line route to cap how much muscle Defender flexes during a scan. Executing these instructions alters the operational limits governing background resource consumption.
Step 2: Check your current CPU limit
Copy and paste this command and press Enter:
Get-MpPreference | select ScanAvgCPULoadFactorConsole output will display the active restriction value, which typically defaults to 50.
Step 3: Set a new CPU limit
Run the command below, swapping <percentage> for an integer between 0 and 100:
Set-MpPreference -ScanAvgCPULoadFactor <percentage>Example: Restricting the antivirus engine to a maximum 30 percent threshold requires executing:
Set-MpPreference -ScanAvgCPULoadFactor 30Step 4: Restart your computer
Reboot the machine to enforce the updated parameters.
2Using Local Group Policy Editor (For 🪟 Windows 11 Pro or Enterprise)
Windows 11 Pro and Enterprise editions feature the Local Group Policy Editor, a centralized management console for configuring system parameters. Modifying these policies governs how heavily scanning tasks impact overall hardware performance.
Step 1: Open Local Group Policy Editor
gpedit.msc, and press Enter. [ADMIN REQUIRED]Step 2: Navigate to the Scan folder
Go to this location:
Computer Configuration → Administrative Templates → Windows Components → Microsoft Defender Antivirus → Scan
Step 3: Find and edit the CPU setting
Click the Scan directory in the left sidebar, then double-click "Specify the maximum percentage of CPU utilization during a scan" on the right panel.
Step 4: Enable and set your percentage
Choose Enabled, then type any integer from 0 to 100 into the percentage field.
Step 5: Apply changes
Click Apply and OK.
Step 6: Restart your computer
Reboot the operating system to apply the configuration.
3Using Windows Registry Editor (If Group Policy Editor is not available)
Home editions lacking policy management tools can utilize the Registry Editor (a database storing low-level operating system configurations) to enforce identical performance restrictions.
Step 1: Open Registry Editor
Press Windows key + R, type regedit, and press Enter. [ADMIN REQUIRED]
Step 2: Navigate to the Defender Scan folder
Go to this location:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\ScanStep 3: Create the Scan folder if it doesn't exist
Locate the Windows Security registry key, right-click it, select New, then Key, and name the resulting directory Scan. This establishes a dedicated container for scanning preferences.
Step 4: Create a new value
Select the Scan directory, right-click any empty space in the right pane, hover over New, and pick DWORD (32-bit) Value. Name this newly generated entry AvgCPULoadFactor.
Step 5: Set the CPU percentage
Double-click the new entry, select 'Decimal' for the base, and type a number from 0 to 100. Entering 25, for instance, restricts background scans to a quarter of total processing power, overriding the default value of 50.
Step 6: Save and close
Click OK and close the Registry Editor window.
Step 7: Restart your computer
Reboot the computer to validate the configuration.
Important Note: Always back up the registry prior to making modifications. Incorrect entries can destabilize the operating system.
What Happens When You Lower CPU Usage?
System responsiveness improves noticeably during active scans, letting intensive applications run smoothly. The sole trade-off involves longer completion times for full system checks.
Summary
Limiting antivirus resource consumption in Windows 11 prevents background scans from hijacking hardware performance. Administrators can implement these restrictions via PowerShell, the Local Group Policy Editor, or the Registry Editor depending on system editions.
Selecting any of these administrative pathways gives fine-grained control over system behavior. Pick the environment that matches your administrative preference.
Throttling processor utilization maintains overall desktop speed during security sweeps while marginally extending scan durations.
Rebooting the hardware following any configuration change guarantees the modified parameters initialize correctly.
Consult official documentation via Configure scanning options for Microsoft Defender for deeper technical specifications.
Readers are welcome to share questions or alternative performance tweaks in the comment section below. Community contributions help fellow users overcome hardware bottlenecks on Windows 11.
Does Windows Defender full scan use a lot of CPU?
Yes, a Windows Defender full scan can use a lot of CPU, potentially up to 100%, especially if CPU throttling is turned off, which can make your PC slow or even overheat.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!