Windows 10: Enable Tamper Protection via command

Is there is a way to enable Defender tamper protection using PowerShell or CMD? I have already used the following two commands, but they returned a failure message.reg.exe add "HKLM\SOFTWARE\Microsoft\Windows Defender\Features" /v TamperProtection /t REG_DWORD /d 5 /fERROR: Access is denied.Set-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Microsoft\Windows Defender\Features' -Name TamperProtection -Value 5Set-ItemProperty : Requested registry access is not allowed. At line:1 char:1 + Set-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Microsoft\Windows Defen ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

:)

 

Microsoft Defender Antivirus - Tamper Protection

We use Windows 11 with Microsoft Defender Antivirus and tamper protection enabled. During a penetest we found out, that Microsoft Defender Antivirus can be easily disabled by installing a third Party antivirus solution, even tamper protection is enabled. Of course, local admin rights were required, but we were very surprised, that tamper protection can be so easily levered out.

We think this is a serious security issue and opened allready two cases by MS, but never got any response.

Has somenone an idea or suggestion, how to solve this issue with tamper protection?

 

Enable Tamper Protection Using PowerShel or CMD

How to activate Tamper Protection using Powershell or Command Line?

 

Cant turn off tamper protection

Hi Faza,

I'm Christine, a Windows user like you. I'll do my best to help you.

I can see here that you cannot turn off the tamper protection. Please follow the steps below:

1. Please click start menu and type Access Work or School and hit enter. Check if there's an account connected, please try to disconnect it and check if you will be able to turn off the tamper protection.

2. Please check this link and follow the steps given by Kapil Arya and Dave Patrick.

https://learn.microsoft.com/en-us/answers/quest...

Please let me know the result. I'll be happy to assist you all the way until it's resolved.

Thank you,

Christine L

Independent Advisor