diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index 411a9584..f8251fc4 100644
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -61,7 +61,10 @@ jobs:
           name: winit
           path: dist/**/*.exe
       - name: Check Windows Defender does not false positive detect the product
+        # https://github.com/actions/runner-images/issues/855#issuecomment-626692949 may help to understand
         run: |
+          Remove-MpPreference -ExclusionPath (Get-MpPreference).ExclusionPath
+          Set-Service -Name wuauserv -StartupType Manual -Status Running
           & "C:\Program Files\Windows Defender\MpCmdRun.exe" -SignatureUpdate
           & "C:\Program Files\Windows Defender\MpCmdRun.exe" -Scan -ScanType 3 -File "$(pwd)\dist\winit-conf_windows_amd64_v1\winit-conf.exe"
           & "C:\Program Files\Windows Defender\MpCmdRun.exe" -Scan -ScanType 3 -File "$(pwd)\dist\winit-reg_windows_amd64_v1\winit-reg.exe"