Windows Defender Configuration Checklist for Enterprise - Fix Windows Defender Disabled by Group Policy or Registry-Fix Windows Terminal Login Loop After Update

Final checklist
- Confirm that the same symptom is gone after a restart or refresh.
- Keep the smallest working change and undo temporary diagnostic settings.