在Excel VBA中使用Powershell启用Windows Defender

Question

In the following code, I am trying to enable the Windows Defender using powershell

Sub Enable_Disable_Windows_Defender_Using_PowerShell()
    Dim wshShell        As Object
    Dim wshShellExec    As Object
    Dim strCommand      As String

    Rem Enable = false - Disable = true
    strCommand = "Powershell -nologo -WindowStyle Hidden -ExecutionPolicy Bypass -Command ""Set-MpPreference -DisableRealtimeMonitoring $false"""
    Set wshShell = CreateObject("WScript.Shell")
    Set wshShellExec = wshShell.Exec(strCommand)
End Sub

There is no error at executing the code but I didn't get the Windows Defender Eabled Any idea ..?

I tried this but doesn't work for me too

Sub Enable_Disable_Windows_Defender_Using_PowerShell()
    Dim wshShell        As Object
    Dim wshShellExec    As Object
    Dim strCommand      As String

    Rem Enable = false - Disable = true

    strCommand = "Powershell -nologo -Command ""Start-Process powershell -Verb runAs"""
    Set wshShell = CreateObject("WScript.Shell")
    Set wshShellExec = wshShell.Exec(strCommand)


    strCommand = "Powershell -nologo -WindowStyle Hidden -ExecutionPolicy Bypass -Command ""Set-MpPreference -DisableRealtimeMonitoring $false"""
    Set wshShell = CreateObject("WScript.Shell")
    Set wshShellExec = wshShell.Exec(strCommand)
End Sub

Answer 1

You could try these:

Disable Windows Defender

$regpath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender"
if (!(Test-Path $regpath -PathType Container)) {
    New-Item -Path $regpath -ItemType Container -Force
}
Set-ItemProperty -Path $regpath -Name "DisableAntiSpyware" -Value 1 -Type DWord -Force
# stop the service and set it to Disabled
Stop-Service -Name WinDefend -Confirm:$false -Force
Set-Service -Name WinDefend -StartupType Disabled

Enable Windows Defender

$regpath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender"
if (Test-Path $regpath -PathType Container) {
    Set-ItemProperty -Path $regpath -Name "DisableAntiSpyware" -Value 0 -Type DWord -Force
    # or remove the whole registry key "Windows Defender"
    # Remove-Item -Path $regpath -Force
}
# set the service to startup Automatic and start the service
Set-Service -Name WinDefend -StartupType Automatic
Start-Service -Name WinDefend -Confirm:$false

You need to run this as Administrator and as to how to do this, I agree with Lee_Daily you should post a new question for that.