New
#240
Microsoft has just recently confirmed on their website that "DisableAntiSpyware is discontinued and will be ignored on client devices, as of the August 2020 (version 4.18.2007.8) update to Microsoft Defender Antivirus."
Source: https://docs.microsoft.com/en-us/win...bleantispyware
Looks like Tamper Protection wasn't the issue after all. Microsoft has recoded Microsoft Defender to ignore this registry key.
Meaning that there is currently no official way to turn Defender off without falling to third party AV (which uses some publicly undisclosed mechanisms to turn Defender off). Is it possible to revert to a version prior to this 4.18.2007.8, lock it there (by changing folder ownership rights, for instance) and still retain definition updates from MS? While we wait for some workaround for this.
But how? In services anything for WinDefend, WdNisSvc and WdFilter is greyed out, while net stop states that Access is denied.
You can change services via registry, but you must disable tamper protection first, it protects those entries.
News on the topic:
Microsoft makes it difficult to disable Windows Defender on Windows 10