Ensure that Windows Defender is fully disabled after installation of the anti-malware module on Windows Server 2016

When you install the anti-malware module for a Deep Security Agent 10.0 or later on Windows Server 2016, the agent will automatically disable Windows Defender, but not all of the Windows processes related to the Windows Defender service. To do so, you need to reboot Windows Server 2016 after the Deep Security anti-malware module installation finishes. The Deep Security Agent will open a Windows message to let you know when to reboot.

The agent will report a computer warning event ("Computer reboot is required for Anti-Malware protection") to the Deep Security Manager. This event will remain indefinitely, and will need to be manually dismissed by an administrator.

Installing the anti-malware module when Windows Defender is already disabled

If you disable Windows Defender before installing the Deep Security anti-malware module, the Deep Security Agent will not open a Windows reboot message. However, you still need to reboot Windows Server 2016 to ensure that Deep Security anti-malware functions correctly.