Some of the following information relates to a prereleased version of a product that may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Tamper Protection in Windows Security helps prevent malicious apps from changing important Windows Defender Antivirus settings, including real-time protection and cloud-delivered protection. If Tamper Protection is turned on and you're an administrator on your computer, you can still change these settings in the Windows Security app. However, other apps can't change these settings.
Tamper Protection doesn't affect how third-party antivirus apps work or how they register with Windows Security.
Tamper Protection is turned on by default. If you turn off Tamper Protection, you will see a yellow warning in the Windows Security app under Virus & threat protection.
Change the Tamper Protection setting
- In the search box on the taskbar, type Windows Security and then selct Windows Security in the list of results.
- In Windows Security, select Virus & threat protection and then under Virus & threat protection settings, select Manage settings.
- Change the Tamper Protection setting to On or Off.
- Tamper Protection blocks attempts to modify Windows Defender Antivirus settings through the registry. To help ensure that Tamper Protection doesn’t interfere with third-party security products or enterprise installation scripts that modify these settings, go to Windows Security and update security intelligence to version 1.287.60.0 or later. Once you’ve made this update, Tamper Protection will continue to protect your registry settings and will log attempts to modify them without returning errors.
- If the Tamper Protection setting is On, you won't be able to turn off the Windows Defender Antivirus service by using the DisableAntiSpyware group policy key.