By default, tamper protection is enabled and turned on in Windows 11. If you’re an administrator on a Windows device, you can make changes to Windows Defender antivirus settings, but other apps can’t change these settings. Tamper protection essentially locks Microsoft Defender Antivirus settings, thus preventing other apps from making changes using any of the following:
Via Registry Editor Via Windows commands or PowerShell Via Local Group Policy
Tamper Protection doesn’t affect how third-party antivirus apps work or how they register with Windows Security. Tamper protection should always be turned on to enhance your device protection. If you turn off Tamper Protection, you will see a yellow warning in the Windows Security app under Virus & threat protection alerting you to re-enable tamper protection to keep your device secure.
How to prevent tampering Microsoft Defender antivirus with tamper protection
As mentioned above, Tamper Protection in Windows Security helps prevent malicious apps from changing important Microsoft Defender Antivirus settings, including real-time protection and cloud-delivered protection. If the Tamper Protection setting is On, you won’t be able to turn off the Microsoft Defender Antivirus service by using the DisableAntiSpywaregroup policykey. Below is how to turn On or Off tamper protection in the Microsoft Defender Antivirus Windows Security app in Windows 11. Change the Tamper Protection setting: In the search box on the taskbar, type Windows Security and then select Windows Security in the list of results. In Windows Security, select Virus & threat protection. Under Virus & threat protection settings, select Manage settings. Change the Tamper Protection setting to On or Off. That should do it! Conclusion: This post showed you how to turn on or off Microsoft Defender antivirus tamper protection in Windows 11. If you find any error above or have something to add, please use the comment form below.
