Security Policy Errors

How to Clear Old Microsoft Defender Protection History Alerts

Phi Hung Vo Oct 21, 2026 868 views

Question details

Users are trying to clear old, resolved threat notifications from Microsoft Defender but encounter access denied errors when navigating to the scan history folders, even on an administrator account.

How to Clear Old Microsoft Defender Protection History Alerts

Product: Microsoft Defender (Windows Security)
Device & OS: Windows 11 / Windows 10
Scenario: Attempting to manually delete stale threat alerts from the Windows Security protection history folder.
Observed behavior: Old threat notifications persist after being resolved, and the system blocks administrator access to the C:\ProgramData\Microsoft\Windows Defender\Scans folder.

Before you start

Verify that the threats shown in your protection history have actually been fully resolved or quarantined before attempting to clear the history logs.

Solution 1Recommended

Temporarily Disable Real-Time Protection to Clear Scan History

Bypass folder access restrictions by temporarily pausing Windows Security's real-time protection, which unlocks the history service folder for manual deletion.

Microsoft rigorously protects the Windows Defender folders at the system level to prevent malware from tampering with your security logs. Because of this built-in protection, even elevated administrator accounts are denied access by default.

To clear the stale history notifications, you must briefly turn off real-time protection to lift the lock on the history files.

Open Virus & Threat Protection Settings

Click the Start menu, search for 'Windows Security', and open the app. Click on 'Virus & threat protection' from the dashboard, then click the 'Manage settings' link.

Turn Off Real-Time Protection

Toggle the 'Real-time protection' switch to Off. A User Account Control (UAC) prompt will appear asking for permission; click Yes to confirm.

Delete the History Service Files

Press Windows Key + E to open File Explorer. Copy and paste the following path into the address bar: C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service. Select all the files inside this folder and delete them.

Re-enable Real-Time Protection

Immediately return to the Windows Security window and toggle the 'Real-time protection' switch back to On to ensure your computer is protected.

Temporarily Disable Real-Time Protection to Clear Scan History

Important Safety Warning: Only delete the files contained inside the 'Service' folder. Do not delete the folder itself, and do not modify any other files in the Windows Defender directory. Always remember to turn real-time protection back on immediately.

Free Microsoft Office alternative

Secure and Lightweight Alternative for Your Office Needs

While resolving system security policies and maintaining your PC, equip your device with a lightweight, secure, and fully compatible office suite. WPS Office provides an exceptional free alternative to Microsoft Office, ensuring your documents remain perfectly formatted without straining your computer's resources.

1. Download the Installer: Visit the official WPS Office website and download the free installation package for Windows.
2. Install the Suite: Run the downloaded installer file and follow the quick on-screen setup instructions.
3. Start Creating: Launch WPS Office to immediately start opening, editing, and saving your existing Microsoft Office files.

100% compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Lightweight installation footprint that keeps your Windows system running smoothly and securely.Built-in document encryption to help secure your local files.Familiar tabbed interface that makes migrating from Microsoft Office completely effortless.

microsoft office alternative - wps office

Frequently Asked Questions

Why is access denied to the Windows Defender Scans folder even as an administrator?

Microsoft protects the Defender folders at the system level using Tamper Protection to prevent malware from deleting your security history or disabling your antivirus. You must temporarily disable real-time protection to access these protected files manually.

Will old protection history alerts expire automatically over time?

Yes, Windows Security is designed to automatically clear resolved and quarantined threat notifications after 15 to 30 days. Manual removal is only necessary if a glitch causes stale alerts to persistently trigger false notifications.

Is it safe to delete files inside the Windows Defender directory?

You should only delete the contents explicitly inside the 'Scans\History\Service' folder to clear old logs. Modifying, renaming, or deleting other Windows Defender files or folders can severely corrupt your security software and leave your PC vulnerable.

Microsoft Office Security Issues