I disabled Windows Defender using Group policies when it was erasing data from my samba3 server. Group policy is the only way to control windows any more.