How to Turn On or Off Tamper Protection for Microsoft Defender Antivirus in Windows 10
Starting with Windows 10 version 2004, Windows Defender Antivirus as been renamed to Microsoft Defender Antivirus.
Windows 10 includes Windows Security, which provides the latest antivirus protection. Your device will be actively protected from the moment you start Windows 10. Windows Security continually scans for malware (malicious software), viruses, and security threats. In addition to this real-time protection, updates are downloaded automatically to help keep your device safe and protect it from threats.
Starting with Windows 10 build 18305, Microsoft introduced Tamper Protection.
Tamper Protection is a new setting from Microsoft Defender Antivirus, available in the Windows Security app, which when on, provides additional protections against changes to key security features, including limiting changes which are not made directly through the Windows Security app.
Starting with Windows 10 build 18323, you may see a new recommendation in the Windows Security app suggesting you turn this setting on if currently turned off.
See also:
- Protect security settings with Tamper Protection | Microsoft Docs
- Prevent changes to security settings with Tamper Protection | Windows Security Support
- Tamper protection now generally available for Microsoft Defender ATP customers | Microsoft Tech Community
This tutorial will show you how to turn on or off Tamper Protection for key Microsoft Defender Antivirus security features in Windows 10.
You must be signed in as an administrator to turn on or off Tamper Protection.
Microsoft Defender Antivirus tamper protection is turned on by default for all consumer Windows 10 devices. This feature protects devices from cyber attacks that try to disable built-security solutions, such as antivirus protection, in an attempt to gain access to your data, to install malware, or to otherwise exploit your data, identity, and devices. As Microsoft Defender antivirus automatically turns itself off when it detects another antivirus program, we are removing a legacy registry setting called DisableAntiSpyware. Intended to be used by OEMs and IT admins to disable Microsoft Defender Antivirus for the purpose of deploying another antivirus product during deployment, DisableAntiSpyware is not applicable to consumer devices and will be removed beginning with Microsoft Defender Antimalware platform versions 4.18.2007.8 and higher (see KB4052623 for details). This update will be rolled out to devices running Windows Enterprise E3 and E5 at a future date.
Source: https://docs.microsoft.com/en-us/win...age-center#465
Here's How:
1 Open Windows Security, and click/tap on the Virus & threat protection icon. (see screenshot below)
2 Click/tap on the Manage settings link under Virus & threat protection settings. (see screenshot below)
3 Turn on (default) or off Tamper Protection for what you want. (see screenshot below)
The registry key and DWORD value for this setting is located below, but you will not be able to manually change the TamperProtection DWORD value unless you take ownership of the Features key first.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features
TamperProtection DWORD
0 = Off
5 = On
4 When prompted by UAC, click/tap on Yes to approve.
5 You can now close Windows Security if you like.
That's it,
Shawn