Microsoft Confirms Windows Devices Showing False Defender Antivirus Turned Off Warnings

Microsoft confirmed a notification defect causing false “Microsoft Defender Antivirus is turned off” alerts on multiple Windows client and server versions after recent Defender updates; Defender remains functional but the misleading, persistent alerts can disrupt triage and helpdesk workflows. Microsoft has not released a mitigation or rollback and advises administrators to verify Defender’s operational state via endpoint management tools and await a future fix.