Last Updated on July 2, 2021 by Mathew Diekhake

Applies to

  • Windows 10, version 1703 and later

This library describes the Windows Security app, and provides information on configuring certain features, including:

In Windows 10, version 1709 and later, the app also shows information from third-party antivirus and firewall apps.

In Windows 10, version 1803, the app has two new areas, Account protection and Device security.

Note

The Windows Security app is a client interface on Windows 10, version 1703 and later. It is not the Microsoft Defender Security Center web portal console that is used to review and manage Microsoft Defender for Endpoint.

You can’t uninstall the Windows Security app, but you can do one of the following:

You can find more information about each section, including options for configuring the sections – such as hiding each of the sections – at the following topics:

  • Virus & threat protection, which has information and access to antivirus ransomware protection settings and notifications, including Controlled folder access, and sign-in to Microsoft OneDrive.
  • Account protection, which has information and access to sign-in and account protection settings.
  • Firewall & network protection, which has information and access to firewall settings, including Windows Defender Firewall.
  • App & browser control, covering Windows Defender SmartScreen settings and Exploit protection mitigations.
  • Device security, which provides access to built-in device security settings.
  • Device performance & health, which has information about drivers, storage space, and general Windows Update issues.
  • Family options, which includes access to parental controls along with tips and information for keeping kids safe online.

Note: If you hide all sections then the app will show a restricted interface, as in the following screenshot:

Open the Windows Security app

1. Click the icon in the notification area on the taskbar.

2. Search the Start menu for Windows Security.

3. Open an area from Windows Settings.

Note: Settings configured with management tools, such as Group Policy, Microsoft Intune, or Microsoft Endpoint Configuration Manager, will generally take precedence over the settings in the Windows Security. See the topics for each of the sections for links to configuring the associated features or products.

How the Windows Security app works with Windows security features

 Important: Microsoft Defender AV and the Windows Security app use similarly named services for specific purposes.

The Windows Security app uses the Windows Security Service (SecurityHealthService or Windows Security Health Servce), which in turn utilizes the Security Center service (wscsvc) to ensure the app provides the most up-to-date information about the protection status on the endpoint, including protection offered by third-party antivirus products, Windows Defender Firewall, third-party firewalls, and other security protection.

These services do not affect the state of Microsoft Defender AV. Disabling or modifying these services will not disable Microsoft Defender AV, and will lead to a lowered protection state on the endpoint, even if you are using a third-party antivirus product.

Microsoft Defender AV will be [disabled automatically when a third-party antivirus product is installed and kept up to date]/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-compatibility).

Disabling the Windows Security Center service will not disable Microsoft Defender AV or Windows Defender Firewall.

Warning:
If you disable the Security Center service, or configure its associated Group Policy settings to prevent it from starting or running, the Windows Security app may display stale or inaccurate information about any antivirus or firewall products you have installed on the device.

It may also prevent Microsoft Defender AV from enabling itself if you have an old or outdated third-party antivirus, or if you uninstall any third-party antivirus products you may have previously installed.

This will significantly lower the protection of your device and could lead to malware infection.

The Windows Security app operates as a separate app or process from each of the individual features, and will display notifications through the Action Center.

It acts as a collector or single place to see the status and perform some configuration for each of the features.

Disabling any of the individual features (through Group Policy or other management tools, such as Microsoft Endpoint Configuration Manager) will prevent that feature from reporting its status in the Windows Security app. The Windows Security app itself will still run and show status for the other security features.

 Important: Individually disabling any of the services will not disable the other services or the Windows Security app.

For example, using a third-party antivirus will disable Microsoft Defender Antivirus. However, the Windows Security app will still run, show its icon in the taskbar, and display information about the other features, such as Windows Defender SmartScreen and Windows Defender Firewall.