mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-23 14:23:38 +00:00
Update prevent-changes-to-security-settings-with-tamper-protection.md
This commit is contained in:
@ -35,14 +35,6 @@ With tamper protection, malicious apps are prevented from taking actions like th
|
|||||||
- Disabling cloud-delivered protection
|
- Disabling cloud-delivered protection
|
||||||
- Removing security intelligence updates
|
- Removing security intelligence updates
|
||||||
|
|
||||||
Tamper protection now integrates with [Threat & Vulnerability Management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt). Security recommendations include making sure tamper protection is turned on.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
In the results, you can select **Turn on Tamper Protection** to learn more and turn it on.
|
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
### How it works
|
### How it works
|
||||||
|
|
||||||
Tamper protection essentially locks Windows Defender Antivirus and prevents your security settings from being changed through apps and methods like these:
|
Tamper protection essentially locks Windows Defender Antivirus and prevents your security settings from being changed through apps and methods like these:
|
||||||
@ -61,8 +53,11 @@ Tamper protection doesn't prevent you from viewing your security settings. And,
|
|||||||
|
|
||||||
[View information about tampering attempts](#view-information-about-tampering-attempts)
|
[View information about tampering attempts](#view-information-about-tampering-attempts)
|
||||||
|
|
||||||
|
[Review your security recommendations](#review-your-security-recommendations)
|
||||||
|
|
||||||
[Browse the frequently asked questions](#view-information-about-tampering-attempts)
|
[Browse the frequently asked questions](#view-information-about-tampering-attempts)
|
||||||
|
|
||||||
|
|
||||||
## Turn tamper protection on (or off) for an individual machine
|
## Turn tamper protection on (or off) for an individual machine
|
||||||
|
|
||||||
> [!NOTE]
|
> [!NOTE]
|
||||||
@ -80,11 +75,7 @@ If you are a home user, or you are not subject to settings managed by a security
|
|||||||
|
|
||||||
3. Set **Tamper Protection** to **On** or **Off**.
|
3. Set **Tamper Protection** to **On** or **Off**.
|
||||||
|
|
||||||
Here's what you see in the Windows Security app when using Windows 10 Enterprise:
|
Here's what you see in the Windows Security app:
|
||||||
|
|
||||||

|
|
||||||
|
|
||||||
And here's what you see in the Windows Security app when using Windows 10 Home:
|
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
@ -120,6 +111,10 @@ You must have appropriate [permissions](../microsoft-defender-atp/assign-portal-
|
|||||||
|
|
||||||
5. Assign the profile to one or more groups.
|
5. Assign the profile to one or more groups.
|
||||||
|
|
||||||
|
Here's what you see in the Windows Security app:
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
### Are you using Windows OS 1709, 1803, or 1809?
|
### Are you using Windows OS 1709, 1803, or 1809?
|
||||||
|
|
||||||
If you are using Windows OS [1709](https://docs.microsoft.com/windows/release-information/status-windows-10-1709), [1803](https://docs.microsoft.com/windows/release-information/status-windows-10-1803), or [1809](https://docs.microsoft.com/windows/release-information/status-windows-10-1809-and-windows-server-2019), you won't see **Tamper Protection** in the Windows Security app. In this case, the one of the following procedures to determine whether tamper protection is enabled.
|
If you are using Windows OS [1709](https://docs.microsoft.com/windows/release-information/status-windows-10-1709), [1803](https://docs.microsoft.com/windows/release-information/status-windows-10-1803), or [1809](https://docs.microsoft.com/windows/release-information/status-windows-10-1809-and-windows-server-2019), you won't see **Tamper Protection** in the Windows Security app. In this case, the one of the following procedures to determine whether tamper protection is enabled.
|
||||||
@ -152,6 +147,18 @@ When a tampering attempt is detected, an alert is raised in the [Microsoft Defen
|
|||||||
|
|
||||||
Using [endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) and [advanced hunting](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview) capabilities in Microsoft Defender ATP, your security operations team can investigate and address such attempts.
|
Using [endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) and [advanced hunting](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-overview) capabilities in Microsoft Defender ATP, your security operations team can investigate and address such attempts.
|
||||||
|
|
||||||
|
## Review your security recommendations
|
||||||
|
|
||||||
|
Tamper protection integrates with [Threat & Vulnerability Management](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/next-gen-threat-and-vuln-mgt) capabilities. [Security recommendations](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-security-recommendation) include making sure tamper protection is turned on. For example, you can search on *tamper*, as shown in the following image:
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
In the results, you can select **Turn on Tamper Protection** to learn more and turn it on.
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
To learn more about Threat & Vulnerability Management, see [Threat & Vulnerability Management in Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/tvm-dashboard-insights#threat--vulnerability-management-in-microsoft-defender-security-center).
|
||||||
|
|
||||||
## Frequently asked questions
|
## Frequently asked questions
|
||||||
|
|
||||||
### To which Windows OS versions is configuring tamper protection is applicable?
|
### To which Windows OS versions is configuring tamper protection is applicable?
|
||||||
@ -178,7 +185,7 @@ If you are an organization using [Microsoft Defender ATP E5](https://www.microso
|
|||||||
|
|
||||||
### How does configuring tamper protection in Intune affect how I manage Windows Defender Antivirus through my group policy?
|
### How does configuring tamper protection in Intune affect how I manage Windows Defender Antivirus through my group policy?
|
||||||
|
|
||||||
Your regular group policy doesn’t apply to tamper protection, and changes to Windows Defender Antivirus settings will be ignored when tamper protection is on.
|
Your regular group policy doesn’t apply to tamper protection, and changes to Windows Defender Antivirus settings are ignored when tamper protection is on.
|
||||||
|
|
||||||
>[!NOTE]
|
>[!NOTE]
|
||||||
>A small delay in Group Policy (GPO) processing may occur if Group Policy settings include values that control Windows Defender Antivirus features protected by tamper protection. To avoid any potential delays, we recommend that you remove settings that control Windows Defender Antivirus related behavior from GPO and simply allow tamper protection to protect Windows Defender Antivirus settings. <br><br>
|
>A small delay in Group Policy (GPO) processing may occur if Group Policy settings include values that control Windows Defender Antivirus features protected by tamper protection. To avoid any potential delays, we recommend that you remove settings that control Windows Defender Antivirus related behavior from GPO and simply allow tamper protection to protect Windows Defender Antivirus settings. <br><br>
|
||||||
|
Reference in New Issue
Block a user