Microsoft Defender can no longer be switched to passive mode

Problem description

G DATA has previously recommended switching Microsoft Defender to passive mode when installing our security solutions on server operating systems. However, due to a change made by Microsoft, Defender can now only be switched to passive mode if it is deployed in Microsoft Defender for Endpoints beforehand. Further information on passive mode for Microsoft Defender is available here.

Solution

If you install our software on your Windows Server systems, we recommend uninstalling Microsoft Defender beforehand. While this is not strictly required, it prevents potential incompatibilities and improves performance.

If you decide to uninstall Microsoft Defender, you can use the following commands on the relevant systems (administrator privileges required):

Windows Server 2016

Uninstall-WindowsFeature Windows-Defender
Uninstall-WindowsFeature Windows-Defender-Gui

Windows Server 2019 (and later)

Uninstall-WindowsFeature Windows-Defender

Restart the system afterward and then install the G DATA security solution.