Enable or disable Tamper Protection using Intune, REGEDIT, UI

Download PC Repair Tool to quickly find & fix Windows errors automatically

Windows Security Squad has rolled out Tamper Protection for all Windows users. In this mail service, we volition share how you can enable or disable Tamper Protection in Windows Security or Windows Defender via UI, Registry or InTune. While y'all can turn it off it, we highly recommend you continue information technology enabled at all times, for your protection.

What is Tamper Protection in Windows 11/ten

In simple English, it makes sure nobody can tamper with the Protection arrangement aka Windows Security. The onboard software is good enough to handle nigh of the security threats, including Ransomware. Just if information technology is turned off by a third party software or a malware which sneaks in, then you can get into problem.

Tamper Protection feature in Windows Security makes sure to prevent malicious apps from changing relevant Windows Defender Antivirus settings. Features similar Real-time protection, cloud protection are essential to keep you lot condom from emerging threats. The feature also makes certain that nobody can modify or alter the settings via Registry or Group Policy.

Here is what Microsoft says about it:

• To aid ensure that Tamper Protection doesn't interfere with 3rd-party security products or enterprise installation scripts that alter these settings, get to Windows Security and update security intelligence to version ane.287.lx.0 or later. Once you lot've made this update, Tamper Protection will go along to protect your registry settings and will log attempts to modify them without returning errors.
• If the Tamper Protection setting is On, you won't exist able to turn off the Windows Defender Antivirus service by using the DisableAntiSpywaregroup policycardinal.

Tamper Protection is enabled by default for Dwelling users. Keeping Tamper Protection On doesn't mean that you cannot install 3rd-party antivirus. It simply means no other software tin can alter the settings of Windows Security. Tertiary-party antivirus volition proceed to annals with the Windows Security application.

Disable Tamper Protection in Windows Security

While third parties are blocked from making any changes, you as an administrator can make the changes. Fifty-fifty though you can, we will highly recommend yous to keep it enabled all the time. Yous can configure information technology in three ways:

1. Windows Security UI
2. Registry changes
3. InTune or Microsoft 365 Device Management portal

There is no Grouping Policy Object to change this setting.

one] Using Windows Security UI to disable or enable Tamper Protection

• Click on the Commencement push, and from the app list, locate Windows Security. Click to launch when you find it.
• Switch to Virus and Threat protection > Manage Settings
• Ringlet a fleck to find Tamper Protection. Make sure its toggled On.
• If there is a particular demand, you may turn it off, but brand sure to turn it on once again when piece of work is done.

2] Registry changes to disable or enable Tamper protection

• Open up Registry Editor past typing Regedit in the Run Prompt followed by the Enter cardinal
• Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features
• Double click on DWORD TamperProtection to edit the value.
• Set it to "0" to disable Tamper Protection or "5" to enable Tamper Protection

3] Plow Tamper Protection on or off for your organization using Intune

If yous are using InTune, i.e. Microsoft 365 Device Management portal, yous can use it to Turn Tamper Protection on or off. Apart from having appropriate permissions, y'all need to have the following:

If you are function of your organization'due south security squad, you lot tin turn Tamper Protection on (or off) for your organization in the Microsoft 365 Device Management portal (Intune) assuming your organization has Microsoft Defender Avant-garde Threat Protection (Microsoft Defender ATP):

• Your arrangement must take Microsoft Defender ATP E5, Managed by Intune, and running Windows OS 1903 or later.
• Windows security with security intelligence updated to version 1.287.60.0 (or above)
• Your machines must exist using anti-malware platform version 4.18.1906.3 (or above) and anti-malware engine version 1.i.15500.X (or above)

Now follow the steps to enable or disable Tamper Protection:

1. Go to the Microsoft 365 Device Management portal and sign in with your work or school account.
2. SelectDevice configuration >Profiles
3. Create a contour that includes the post-obit settings:
   • Platform: Windows 10 and later
   • ProfileType: Endpoint protection
   • Settings > Windows Defender Security Heart > Tamper Protection. Configure it on or off
4. Assign the profile to ane or more groups

If you lot do non see this option correct away, it is still being rolled out.

Whenever a change occurs, an warning will be displayed on the Security Center. The security team tin can filter from the logs past following the text below:

AlertEvents | where Title == "Tamper Protection bypass"

No Group Policy Object for Tamper Protection

Lastly, in that location is no Group Policy bachelor to manage multiple computers. A annotation past Microsoft clearly says:

Your regular grouping policy doesn't utilize to Tamper Protection, and changes to Windows Defender Antivirus settings will be ignored when Tamper Protection is on.

Yous tin use the Registry method for multiple computers by remotely connecting to that computer, and deploying the change. Once done, this is how information technology will look in users individual settings:

We hope the steps were easy to follow, and you were able to enable or disable Tamper Protection every bit per your requirement.

Anand Khanse is the Admin of TheWindowsClub.com, a 10-yr Microsoft MVP (2006-16) & a Windows Insider MVP. Please read the entire mail & the comments first, create a Organisation Restore Point before making any changes to your system & exist careful most whatsoever third-party offers while installing freeware.

Source: https://www.thewindowsclub.com/how-to-enable-tamper-protection-in-windows-10

Posted by: kasparyoulty1963.blogspot.com

Share this post