Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update prevent-changes-to-security-settings-with-tamper-protection.md #111

Merged
merged 5 commits into from
Oct 8, 2024
Merged

Update prevent-changes-to-security-settings-with-tamper-protection.md #111

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
6126412
Update prevent-changes-to-security-settings-with-tamper-protection.md
andrewjohnporter Oct 7, 2024
e11bad5
Update prevent-changes-to-security-settings-with-tamper-protection.md
denisebmsft Oct 8, 2024
2227948
Merge branch 'public' into patch-5
denisebmsft Oct 8, 2024
93b4312
Merge branch 'public' into patch-5
denisebmsft Oct 8, 2024
c3d8de2
Merge branch 'public' into patch-5
denisebmsft Oct 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,7 @@ You can use Microsoft Intune and other methods to configure or manage tamper pro
| Use the [Windows Security app](manage-tamper-protection-individual-device.md). | Turn tamper protection on (or off) on an individual device that isn't managed by a security team (such as devices for home use). See [Manage tamper protection on an individual device](manage-tamper-protection-individual-device.md).<br/><br/>*This method doesn't override tamper protection settings that are set in the Microsoft Defender portal, Intune, or Configuration Manager, and it isn't intended to be used by organizations.* |

> [!TIP]
> If you're using Group Policy to manage Microsoft Defender Antivirus settings, keep in mind that any changes made to tamper-protected settings are ignored. If you must make changes to a device and those changes are blocked by tamper protection, use [troubleshooting mode](enable-troubleshooting-mode.md) to temporarily disable tamper protection on the device. After troubleshooting mode ends, any changes made to tamper-protected settings are reverted to their configured state.
> If you're using Group Policy to manage Microsoft Defender Antivirus settings, keep in mind that any changes made to tamper-protected settings are ignored. If you must make changes to a device and those changes are blocked by tamper protection, use [troubleshooting mode](enable-troubleshooting-mode.md) to temporarily disable tamper protection on the device. After troubleshooting mode ends, any changes made to tamper-protected settings are reverted to their configured state. To change the values on tamper-protected settings permanently you will need to disable tamper protection temporarily before turning it back on after the settings have changed. This obviously presents security risks and will not work on devices that are offline when tamper protect was temporarily disabled. This is a strong argument for using other management methods for Defender settings, like Intune, over Group Policy.

## Protect Microsoft Defender Antivirus exclusions

Expand Down