Event ID 5004 — Real-Time Protection Availability

Updated: December 16, 2008

Applies To: Windows Server 2008 R2

In order for Windows Defender to alert you when spyware or other potentially unwanted software is installed on a real-time basis, Real-Time Protection must be enabled and functioning correctly.

Event Details

Product: Windows Operating System
ID: 5004
Source: Microsoft-Windows-Windows Defender
Version: 6.1
Message: %1 Real-time Protection agent configuration has changed.


This is a normal condition. No further action is required.

Real-Time Protection Availability

Core Security