Skip to content

Published: June 8, 2014 | Applies to:

This tutorial will help you to disable automatic removal of scan history items from scan history folder for Windows Defender using GPEDIT & REGEDIT.

Windows Defender is one of the best in-built features of Windows 8 and later updates, that monitor your system to keep away the harmful viruses and other threats. Using this security suite, you can perform a Quick or Full scan based upon your priority to check for possible threats. After performing the scan, Windows Defender store the result of scans into following locations:

C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick

C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource

Here ProgramData folder is hidden though by default. Well, by default, Windows Defender removes the results of scan from the above mentioned folder automatically after a threshold period of 30 days. So after performing your search, if you look out the scan results in same folder on 31st day, you won’t have those results anymore. Here is how to make Windows Defender to keep those scan history items forever or avoid the same from being removed:

Disable Automatic Removal Of Scan History Items Using GPEDIT

NOTE : Local Group Policy Editor is only available in Windows Enterprise and Pro editions, for other versions, try REGEDIT method discussed after this method.

1. Press Windows Key + R and put gpedit.msc in Run dialog box to open Local Group Policy Editor. Click OK.

2. Navigate here:

Computer Configuration -> Administrative Templates -> Windows Components -> Windows Defender -> Scan

3. In the right pane of above shown window, look for the Setting named Turn on removal of items from scan history folder and double click the same to get this:

4. Moving on, in above shown window, first click Enabled and then in Options section, input 0 so that we can prevent automatic removal of scan history items as evident from policy explanation. Click Apply followed by OK. You may now close Local Group Policy Editor and reboot the machine to make changes effective.

Disable Automatic Removal Of Scan History Items Using REGEDIT

1. Press Windows Key + R and put regedit in Run dialog box to open Registry Editor (if you’re not familiar with Registry Editor, then click here). Click OK.

2. Navigate here:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan

3. In the right pane of this location, right click and select New -> DWORD. Name this newly created DWORD (REG_DWORD) as PurgeItemsAfterDelay and double click the same to get this:

4. In the above shown box, input the Value data as 0 and click OK. You may now close the Registry Editor and reboot the machine to get your tweak applying its action.

That’s it!


SHARE: Facebook Google+ Twitter

Leave a Reply

Your email address will not be published. Required fields are marked *

What's New


Recent Comments

  • frozen nerd : i also tried uninstalling avast, disabling all startup progr...

    2 hours ago

  • frozen nerd : i have a win 10 home OEM from ASUS tried this and got the ...

    2 hours ago

  • Darren : Thank you, Kapil! The first two netsh commands and reboot ju...

    4 hours ago

  • Charles : I followed your steps but got stuck at step 9 since I couldn...

    9 hours ago

  • Barry : Fantastic! You solved my problem with very clear instruction...

    10 hours ago

  • Keith Fessey : Ok, so whats the difference between the "recovery key" and t...

    14 hours ago


Windows Group Policy Troubleshooting