When trying to disable Microsoft endpoint protection


https://social.technet.microsoft.com/Forums/forefront/en-US/f4347d13-5c9a-4395-b070-9aa53d613f68/is-there-a-way-to-restart-the-microsoft-antimalware-service?forum=FCSNext


1. Run Process Explorer (Procexp.exe) as the SYSTEM account by using PSEXEC: psexec -s -i C:\Pathtofile\procexp.exe

2. Double-click MsMpEng.exe to bring up the properties window

3. Go to the services tab

4. click the Permissions button

5. Give Full Control to the Administrators group and click OK

You should now be able to stop and start the service through the service management console or the command prompt with net stop/start

However, as soon as you do a stop/start of the service, the permissions will be reverted to default so you would have to go back through Process Explorer each time.


\\hlgcjhbfs01\IT Share\software\PSTools