Windows Defender Antivirus compatibility with Windows Defender ATP

Applies to:

  • Windows 10 Enterprise
  • Windows 10 Education
  • Windows 10 Pro
  • Windows 10 Pro Education
  • Windows Defender
  • Windows Defender Advanced Threat Protection (Windows Defender ATP)

Want to experience Windows Defender ATP? Sign up for a free trial.

The Windows Defender Advanced Threat Protection agent depends on Windows Defender Antivirus for some capabilities such as file scanning.

You must configure the signature updates on the Windows Defender ATP endpoints whether Windows Defender Antivirus is the active antimalware or not. For more information, see Manage Windows Defender Antivirus updates and apply baselines.

If an onboarded endpoint is protected by a third-party antimalware client, Windows Defender Antivirus on that endpoint will enter into passive mode.

Windows Defender Antivirus will continue to receive updates, and the mspeng.exe process will be listed as a running a service, but it will not perform scans and will not replace the running third-party antimalware client.

The Windows Defender Antivirus interface will be disabled, and users on the endpoint will not be able to use Windows Defender Antivirus to perform on-demand scans or configure most options.

For more information, see the Windows Defender Antivirus and Windows Defender ATP compatibility topic.