The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in mid-October 2026. We hope you enjoy the updated experience.

Disable and unregister On-Access Scan with Windows Security Center on a client system

Prev Next

Upon selecting the disable and unregister On-Access Scan with Windows Security Center option, the On-Access Scan gets disabled and unregistered from Windows Security Center and allows Defender to be set as the active antivirus alongside other Trellix defenses.

You might choose to disable and unregister On-Access Scan with Windows Security Center in specific environments to avoid conflicting security notifications or to allow a third-party security solution to act as the primary provider.

Note

Disabling this registration does not stop On-Access Scan from protecting your system; it only stops Endpoint Security from reporting its status to the Windows Security Center interface

Before you begin

Make sure that the interface mode for the Trellix Endpoint Security (ENS) Client is set to Full access or log on to the Trellix Endpoint Security (ENS) Client as administrator.



Task
  1. Open the Trellix Endpoint Security (ENS) Client.

  2. Click Threat Prevention on the main Status page.

    Or, from the Action menu GUID-A3B12F55-7EE9-4519-8FCA-9ACA85C3661F-low.png, select Settings, then click Threat Prevention on the Settings page.

  3. Click Show Advanced.

  4. Click On-Access Scan.

  5. Under On-Access Scan, select Disable and unregister with Windows Security Center to remove the on-access scanner from Windows Security Center and enable Defender as the active antivirus alongside Trellix defenses.

  6. Click Apply.