Windows 10 1903: Windows Defender Antivirus gets Tamper Protection feature
Microsoft released a new preview build of the upcoming first feature update of 2019 for Windows 10; the new build, the last for this year according to Microsoft, introduced a number of interesting new features and changes to the operating system.
We covered Windows Sandbox, a new sandboxing feature, earlier today already. It is integrated in all Pro and Enterprise editions of Windows 10 and can be used without installation of virtual machine images or third-party software.
Another new security related feature protects Windows Defender Antivirus from tampering.
Tamper Protection's description provides some insight on what it does:
Prevents others from tampering with important security features.
The feature itself lacks additional information, but Microsoft revealed additional tidbits on the Windows Experience blog:
Tamper Protection is a new setting from Windows Defender Antivirus, available in the Windows Security app, which when on, provides additional protections against changes to key security features, including limiting changes which are not made directly through the Windows Security app.
Tamper Protection prevents certain changes to security features to avoid misuse. Malicious applications could change security settings but with tamper protection in place, these setting changes should be blocked by Tamper Protection.
Microsoft reveals little else: we know just one scenario where changes are blocked if Tamper Protection is enabled but there are more.
How to enable or disable Tamper Protection
- Use the shortcut Windows-I to open the Settings application.
- Go to Windows Security > Virus & Threat Protection > Virus & Threat Protection Settings > Manage Settings.
- Toggle Tamper Protection on or off.
The feature was turned on in the Insider Build version of Windows 10 the feature launched in. It is likely that it will be enabled in the release version as well.
Disabling may be useful if you use third-party software such as Configure Defender which may be blocked from making changes to Windows Defender after you upgrade Windows 10 the 2019 feature update for Windows 10.
The following Registry key determines whether the feature is enabled or disabled:
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features
- 0: Tamper Protection is disabled.
- 1: Tamper Protection is enabled.
The lack of information makes it difficult to judge how effective the new protective feature is. It remains to be seen how effective the new protective feature is.
Tampering Protection did not prevent any of the changes that I made using Configure Defender.
Now You: Which security solution do you use on Windows? Does it have tamper protection?Advertisement