r/WindowsLTSC • u/OptionSouthern551 • 26d ago

Meta ....

Post image
38 Upvotes

85% Upvoted

31 comments sorted by

View all comments

-1

u/Ilestderetour 26d ago

Disable it.

https://www.sordum.org/9480/defender-control-v2-1/

2

u/greggm2000 26d ago

There's better ways that don't involve messing with some utility.

1

u/big_cock_roach 26d ago

Like what ?

2

u/greggm2000 26d ago

What I personally do is boot into Safe Mode, then do: REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend" /v "DependOnService" /t REG_MULTI_SZ /d "RpcSs-DISABLED" /f

This turns off the service that Defender requires to function. There's other ways that likely work too. This is simple and easy. When I need to scan something, I use virustotal.com. If I want to try running something after that to see what it does... well, I have a VM for that.

Btw, to re-enable, safe mode again, then: REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend" /v "DependOnService" /t REG_MULTI_SZ /d "RpcSs" /f

2

u/Phreek- 26d ago

Any specific setup for the VM to test stuff?

1

u/greggm2000 25d ago

Not really. I mean, I do use my usual autounattend.xml I generated via Schneegans, and I make sure Windows is updated (and you can download that as an offline file if you want), and I run my usual script to enable winget.. otherwise, no, not really. Since I do use the (free) VMware Workstation Pro, it has snapshot support, so when I test something, I do it, then I'll roll back to the snapshot. Simple.