Blog

Windows Defender includes a cloud-based automatic sample submission feature to help improve security by sending suspicious files to Microsoft. However, some users prefer to disable this feature for privacy or bandwidth reasons.

Disabling this functionality in Windows 11 is straightforward but requires following specific steps carefully. This guide will walk you through the process in an easy-to-understand way.

You don’t need to be a tech expert to complete these steps, as each part is explained with simple instructions. Just follow along, and you will have it disabled in no time.

Let’s get started with some quick notes to ensure you are prepared for the change.

Quick Note Before You Begin

• Administrator Access: You must be signed in as an administrator to make these changes, as they involve system-level settings.
• Why Disable? Turning off cloud-based sample submission stops automatic sending of suspicious files, which can enhance privacy but may reduce the ability of Windows Defender to detect new threats quickly.
• Backup Settings: It is a good idea to create a system restore point or back up your current settings before making changes.
• Windows Update: Make sure your Windows 11 is updated to the latest version to avoid any compatibility issues.

Step-by-Step Guide to Disable Windows Defender Cloud-Based Automatic Sample Submission

1. Open Windows Security

First, click on the Start button or press the Windows key on your keyboard. Then, type Windows Security in the search bar and press Enter. This will open the Windows Security app where you manage Defender settings.

2. Navigate to Virus & Threat Protection Settings

Once Windows Security is open, look for the Virus & threat protection option on the left sidebar and click it. This section controls how your device handles malware and suspicious files.

3. Access Manage Settings

Scroll down to find the Virus & threat protection settings section. Click on the link Manage settings under this heading. This will take you to more detailed configurations.

4. Locate Automatic Sample Submission Setting

In the settings area, scroll until you see the option called Automatic sample submission. This setting controls whether suspicious files are sent to Microsoft automatically.

5. Turn Off Automatic Sample Submission

Toggle the switch to the Off position. This will disable the cloud-based automatic sample submission feature. You might see a warning explaining that disabling this could reduce protection — make sure you understand this before proceeding.

6. Close Windows Security

After you have toggled off the setting, you can simply close the Windows Security app. The change takes effect immediately.

Alternative Method: Using Group Policy Editor

If you prefer or need to disable this feature for multiple users or computers, you can use the Group Policy Editor. This is an advanced option mainly for Windows 11 Pro or Enterprise editions.

1. Press Windows + R to open the Run dialog box.
2. Type gpedit.msc and press Enter.
3. Navigate to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > MAPS.
4. Find and double-click Configure Automatic Sample Submission.
5. Select Disabled and click Apply, then OK.
6. Close the Group Policy Editor and restart your computer.

This method is useful in business environments or for users managing multiple computers.

Frequently Asked Questions (FAQs)

Is it safe to disable automatic sample submission?

Disabling this feature increases privacy but may reduce Windows Defender’s ability to detect new and emerging threats quickly. It is safe but comes with a trade-off.

Can I enable it again later?

Yes, you can easily turn the setting back on by following the same steps and toggling the switch to On.

Will disabling this affect my antivirus protection?

It might slightly reduce proactive threat detection because suspicious files won’t be analyzed in the cloud. However, your local antivirus scans will continue to work.

Why does Windows still send samples after I disable this?

Some samples may still be sent as part of other Windows Defender features or if you manually submit files for analysis.

Does this affect Windows Defender’s real-time protection?

No. Real-time protection remains active unless you disable it separately.

When Nothing Works

If you find that you cannot disable the feature or the settings revert after a restart, consider these options:

• Ensure your user account has administrator rights.
• Check for any third-party antivirus software that might override Windows Defender settings.
• Use the Group Policy Editor method if you have Windows 11 Pro or Enterprise.
• Run Windows Update to install any pending updates.
• Consult the official Microsoft support page for Windows Defender: Microsoft Windows Security Help.

Conclusion

Disabling Windows Defender’s cloud-based automatic sample submission in Windows 11 is a simple process that can be done through the Windows Security app or Group Policy Editor. This adjustment can improve your privacy but may slightly reduce threat detection capabilities.

By following the detailed steps provided above, you can confidently control this feature according to your preferences. Remember to weigh the pros and cons before making changes, and don’t hesitate to revert the settings if needed.

With these instructions, you have full control over your Windows Defender’s sample submission behavior, helping you tailor your security experience to your needs.