Windows 10 cloud based protection [Turn on/off]

Madalina Dinita
by Madalina Dinita
Former Managing Editor
Affiliate Disclosure
Share this article:

  • Windows 10 Creators Update brings a bevy of new features and improvements.
  • If you want to get rid of the yellow triangle with an exclamation mark displayed by Windows Defender features, keep on reading.
  • Visit our Windows Defender troubleshooting hub page to learn more.
  • Check our Antivirus Software section for more related articles
disable Windows 10 cloud based protection

While the Windows 10 Creators Update brings a bevy of new features and improvements, not all users actually like them. As a matter of fact, many users don’t want to use Windows Defender‘s Cloud Based Protection and also refuse to turn on Automatic Sample Submission. However, if you don’t enable these features, Windows Defender displays a yellow triangle with an exclamation mark in the Notifications tray.

Actually, many users have been confused by this weird yellow triangle and couldn’t find a proper explanation as to why it constantly appeared on the screen.

Now that they know why the warning occurs, many want to simply disable Cloud Based Protection and Automatic Submission notifications. The problem is that turning off these warnings is a challenge in itself since there is no dedicated option for that.

We’ve scoured the almighty internet and found a few solutions to disable Windows Defender’s Cloud Based and Automatic Sample Submission notifications.

Turn off cloud based and automatic sample submission

1. Use Task Manager

How to disable Windows Defender Cloud


  1. Open the Task Manager 
  2. Go to the Start-up tab – locate these two features
  3. Disable them
  4. Restart your computer.

2. Use the / Registry Editor

how to disable Cloud Based Protection

  1. Go to Start
  2. Type group-policy then select Local Group Policy Editor
  3. Go to Computer Configuration – Administrative Templates – Windows Components – Windows Defender Antivirus – MAPS
  4. Disable the following features: Join Microsoft MAPS and Send file samples when further analysis is required
  5. Go to C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe
  6. Disable Firewall profiles
  7. Restart your computer.

Windows 10 Home doesn’t doesn’t support the Group Policy Editor. If you’re running this OS, use the Registry Editor for this task.

    1. Launch Run
    2. Type regedit and hit Enter
    3. Go to the following path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
    4. Under the Windows Defender key, create a new key – name it Spynet
    5. In right-hand pane, create a new DWORD SubmitSamplesConsent – set its value to 2
    6. Create a new DWORD SpynetReporting – set its value to 0

3. Prevent Defender from loading health reports

Windows Defender disable how to

  1. Go to Start – type services – launch Services
  2. Select the Settings option in the left-hand pane
  3. Locate these three services: Diagnostic Policy Service, Diagnostic Services Host, Diagnostic System Host
  4. Right-click each service and  select Properties
  5. On each service, change Startup Type to disabled – click OK. If the services are currently running, click Stop to close the services and then disable them.
  6. Restart your computer.

We hope one of these three solutions help you get rid of Windows Defender’s yellow triangle warning along with the Cloud Based and Automatic Sample Submission notifications.

FAQ: Learn more about Windows Defender cloud based protection

  • What is Windows 10 cloud delivered protection?

This is a feature that enables the Defender antivirus to block unrecognized threats.

  • How do I enable block at first sight?

Open the Windows security app and enable the antivirus protection by following the steps we are presenting in the guide.

  • Does Windows 10 Defender scan automatically?

Windows Defender automatically runs in the background and is scanning all the files you have downloaded or transfered from external devices. And it seems that is even safer when Defender runs scans offline.

Editor’s Note: This post was originally published in February 2018 and has been since revamped and updated in June 2020 for freshness, accuracy, and comprehensiveness.