Privacy and Security Turn On or Off Tamper Protection for Microsoft Defender Antivirus in Windows 11

  • Staff
Windows_Security_banner.png

Microsoft Defender Antivirus is an antivirus software that is included in Windows 11 and can help protect your device from viruses, malware, and other threats.

Tamper Protection in Windows Security helps prevent malicious apps from changing important Microsoft Defender Antivirus settings, including real-time protection and cloud-delivered protection. If Tamper Protection is turned on and you're an administrator on your computer, you can still change these settings in the Windows Security app. However, other apps can't change these settings.

Tamper protection essentially locks Microsoft Defender Antivirus to its secure, default values, and prevents your security settings from being changed through apps and methods such as:
  • Configuring settings in Registry Editor on your Windows device
  • Changing settings through PowerShell cmdlets
  • Editing or removing security settings through Group Policy
Tamper Protection doesn't affect how third-party antivirus apps work or how they register with Windows Security.

Tamper Protection is turned on by default. If you turn off Tamper Protection, you will see a yellow warning in the Windows Security app under Virus & threat protection.

See also:

This tutorial will show you how to turn on or off Tamper Protection for Microsoft Defender Antivirus settings in Windows 11.


You must be signed in as an administrator to turn on or off Tamper Protection.

If the Tamper Protection setting is On, you won't be able to turn off the Microsoft Defender Antivirus service by using the DisableAntiSpywaregroup policy key.


If you have a 3rd party antivirus program installed that disabled Microsoft Defender Antivirus, you will need to turn on periodic scanning to be able to turn on or off Tamper Protection for Microsoft Defender Antivirus.




Here's How:

1 Open Windows Security.

2 Click/tap on Virus & threat protection. (see screenshot below)

Windows_Security_Tanper_Protection-1.png

3 Click/tap on the Manage settings link under Virus & threat protection settings. (see screenshot below)

Windows_Security_Tanper_Protection-2.png

4 Turn On (default) or Off Tamper Protection for what you want. (see screenshots below)

The registry key and DWORD value for this setting is located below for reference, but you will not be allowed to manually change it.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features

TamperProtection DWORD

0 = Off
5 = On


Windows_Security_Tanper_Protection-3.png
Windows_Security_Tanper_Protection-4.png

5 If prompted by UAC, click/tap on Yes to approve.

6 You can now close Windows Security if you like.


That's it,
Shawn Brink


 

Attachments

  • Windows_Security.png
    Windows_Security.png
    6 KB · Views: 3
Last edited:

jerrypc1

"BE WATER MY FRIEND"
Member
VIP
Local time
1:50 AM
Posts
109
Location
DEEP SOUTH
Thanks Shawn
 

My Computer

System One

  • Operating System
    windows 10
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP PAVILION DESKTOP 590-pOxxx
    CPU
    INTEL (R) CORE(TM) i3-8100 CPU @3.60GHz 3.60GHz
    Memory
    8.00GB (7.86 GB usable)
    Monitor(s) Displays
    24W
    Hard Drives
    WINDOWS(C:)BASIC NTFS 913.42 GB /WINDOWS (C) (G) BASIC-2794.52
    RECOVERY (D:) 16.85 GB?DISK PARTITION 1) ( E 260 MB0)DISK (4) R0980MB
    Keyboard
    HP
    Mouse
    LOGITECH (M705
    Browser
    FIRE FOX 94.01
    Antivirus
    WINDOWS SECURITY
    Other Info
    desktop pc #2 PROCESSOR AMD A8-7410 APU WITH AMD RADEON R5 GRAPHICS 2.20 GHZ INSTALLED RAM 4.00 GB(3.45 GB USABLE) DEVICE ID 5c27474D-FCBA-4D)D-89E8-89E8-071DCOAB36AC PRODUCT ID 00325-80450-35140-AAOEM SYSTEM TYPE 64-BIT OPERATING SYSTEM,X64-BASED PROCESSOR PEN AND TOUCH WITH 10 TOUCH POINTS everything else as pc above

    #3 desktop Dell windows 10 home ver 21h1 Intel(R) Pention(R)cpu G2020@ 2.90 GHZ 2.90 GHZ 64 BIT operating System,x 64based Processor Everything else as the 2 pc's above
Top Bottom