Windows 10: Enable Tamper Protection Using PowerShel or CMD

How to activate Tamper Protection using Powershell or Command Line?

:)

 

Microsoft Defender Antivirus - Tamper Protection

We use Windows 11 with Microsoft Defender Antivirus and tamper protection enabled. During a penetest we found out, that Microsoft Defender Antivirus can be easily disabled by installing a third Party antivirus solution, even tamper protection is enabled. Of course, local admin rights were required, but we were very surprised, that tamper protection can be so easily levered out.

We think this is a serious security issue and opened allready two cases by MS, but never got any response.

Has somenone an idea or suggestion, how to solve this issue with tamper protection?

 

Cant turn off tamper protection

Hi Faza,

I'm Christine, a Windows user like you. I'll do my best to help you.

I can see here that you cannot turn off the tamper protection. Please follow the steps below:

1. Please click start menu and type Access Work or School and hit enter. Check if there's an account connected, please try to disconnect it and check if you will be able to turn off the tamper protection.

2. Please check this link and follow the steps given by Kapil Arya and Dave Patrick.

https://learn.microsoft.com/en-us/answers/quest...

Please let me know the result. I'll be happy to assist you all the way until it's resolved.

Thank you,

Christine L

Independent Advisor

 

Tamper Protection problem

Hi, Farooq. I'm glad to assist you with this tamper protection issue.

To remove "This setting is managed by your administrator" message, please open CMD as administrator and run this command:
reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f

Open a new normal CMD console and run this command:

reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f

Reboot your computer and try again to activate the tamper protection.

If you need anything else please let me know.