[UPDATE] Is Windows Defender Enough Security?

TGreer: Quote: "Users need to understand that NO PRODUCT can protect you 100%, and that THEY need to accept the responsibility of watching what they click!"

You and I and everyone in the IT industry have been preaching user responsibility for decades. Although you and I are in complete agreement, sad to say, it'll never happen. Ignorance and user apathy are rampant, always have been, always will be. Want to talk about data backup, security updates, and application updates? Same song, second,third, and fourth chorus. Those folks are also our ticket to continued employment. The 'side benefit (?)' is, for us, early burn-out. Hope you and yours have a great 2018! Hang in there. ---- Lee

I have windows 10 pro version and I do NOT have an option regarding folders. Is it because I am running Bitware as my main VP?

I tried to turn on the folders option which brings up User control and when you click yes to accept it turns back off folder protection.

Along with the Defender,I use Sophos Home Protection. Its free and no ads or popups. It's been great.

Been using Defender only for a couple of years now. Once in a while I would scan with Malwarebytes Free.
Decided to go with paid Malwarebytes just for the scans. Other than usual PUPS, have had no problem.

I use Windows Defender on all my machines and lover the fact that Microsoft updates and program installations work without issues. Third party AV programs often cause problems, and especially a challenge for the Windows 10 "Feature Updates."

“Controlled folder access” is off by default because it breaks many programs - common accepted programs suddenly can't read or write to the protected programs. This should be expected as the 'Whitelist' of programs that are allowed is short. One can add blocked programs to the whitelist but it takes lots of clicks to do so.

Microsoft should have added an option to add a program to the Whitelist when a program is blocked, but they didn't - maybe because the user would be so tired of getting programs blocked that they would just click 'ok' without thinking. And then the Ransomeware would do its business.

There's no easy answer. It would also be helpful to be able to see (and edit) the whitelist, but that's not available either. Maybe later.

I tried to turn on Controlled Folder Access, but several of my apps no longer worked or could no longer be updated. There is an "add or remove exclusions", but I was having trouble figuring out how to add the exclusions. I would turn Controlled Folder Access back on, but I need to find some tutorials on what and how to exclude for these apps.

Have had good results with Defender in my WIN10.

would like to include Guard if no cost, but how, where to download.

I'm with Phillip Reeves - MS has fooled me way to many times, to trust it now. I like using the MS program, but simply do not trust MS for any security measures - I don't even use Microsoft Edge. One time I was a complete user of Microsoft's operating system and all of its bells and whistles, but that was about 20 years ago. In fact Win 95B was the OS that I learned how to use MS and how to repair MS! }:O)

Today, I have good security coverage with Bitdefender Total Security software and Malwarebytes Premium software! I have an excellent Firewall with my Wifi Router, which is a Pace router that used to be 2Wire Routers.

I have been an AT&T Internet DSL customer, since March of 2000 - That is 17 years of good solid Firewall protection. Yes, I have gotten some viruses but it honestly has been a "coon's age." My AV software programs have been doing an excellent job of protection. My Firewall is hardware as part of my Wifi router - Not software and that truly makes a big difference.

In the beginning I hated Windows 10, after the first BIG update in November 2015, I again download Windows 10 for about the 7 time and it finally, worked like it was suppose to work!!! I have finally gotten use to Windows 10 and feel very comfortable using the OS, just like an "old pair of slippers."

So far (knock on wood) I've had no problems. I have McAfee as my anti virus and firewall. Windows defender is set for periodic scanning and I haven't notice any slow downs.

I have Windows Defender on my W7 Pro desktop. Who knew! It tells me, "This program is turned off. If you are using another program that checks for harmful or unwanted software, use the Action Center to check that program's status. If you would like to use this program, click here."

I use malwarebytes and Microsoft Security Essentials which I check for updates most nights and update several times a week. Computer runs good. Do I need Windows Defender?

I have a new laptop that came with Windows 10 - which I finally beat into submission so I could actually do something useful with it - and I am running the free version of Bitdefender.
I followed Bob's instructions and found that all the sliders under Virus & threat protection are set to Off and greyed out - I can't turn any of the options on. Perhaps this is because Bitdefender has taken over these functions from Windows Defender?

Thanks very much,Bob: have passed on the exploit protection implementation to my W10 users. One thought occurs to me - is it as intrusive as EMET, for instance - are they going to find themselves having to authorize things all the time ?

I agree with Philip Reeves and TGreer.

I have used WD and before that MSE for years without problems. I also run Malwarebytes Free daily. They are both unobtrusive. I haven't had any viruses reported for ages and PUPs very rarely. AdblockPlus and tracking protection in Firefox also help.
Vigilance in opening links and downloads is probably the most important action to take.
I wasn't aware of Controlled Folder Access until now and have just switched it on. Thanks Bob.

Re: WinDefender - Installing an "outside" A/V program on a Windows Machine seems like someone buying a Cadillac and then taking it to a Ford dealer to have additional parts put on it. It make sense to me that if the people who write the A/V program eat at the same cafeteria as the people who write the system software, there will be a natural flow of ideas in the same direction. Apparently I'm not seeing that correctly. But one question: Defender automatically turns off when an "outside" A/V program is installed: how are you guys defeating that protective function?

Ordinary folks just want to get on with what they are doing.
That means simple OS's, simple apps & simple to set & forget AV SW.
As the above comments indicate this world provides nothing like that environment.
The obvious flaws remaining in WD are clear testimony to that.
MS can only be regarded as disreputable but there is not much we can do to force change.
I still have unwanted pop ups with Avira & many other intruders & don't always have the time to track down their elimination.
Example: en softonic.com

Security essentials, real time protection will not "turn on" on my win 7 PC. No explanation, just a window that says can't be turned on. Remedy? I have malwarebytes premium.

This is to follow up what I wrote yesterday about using MSE but, taking Bob's advice, I see I also have WD on my W7 Pro desktop. Well, today in reading an article about W10, It mentioned WD as an important tool to use. The screenshot in the article looked soooo familiar. Ha! It's the exact screen shot of MSE! So whatever WD is on my machine, I guess I just don't need it.

Regarding Microsoft patch for the latest CPU flaws (Meltdown/Spectre), here is a partial quote that may convice some to stick with Defender:
"Kevin Beaumont created a constantly updated online spreadsheet listing AV software compatibilities with the Windows patches. As of this writing, Beaumont says, Kaspersky, ESET, Avast, Symantec/Norton, F-Secure and, of course, Windows Defender work with the updates. Sophos, Trend Micro, McAfee, Bitdefender and Webroot don't as of yet (https://arstechnica.com/gadgets/2018/01/meltdown-and-spectre-heres-what-intel-apple-microsoft-others-are-doing-about-it/?comments=1)

Extract part#2:
...During testing, Microsoft found that some anti-virus software tries to do undocumented, unsupported things with kernel memory, and these things break when dual page tables are used...

Kaspersky AV, anyone????