Tamper Protection is a setting from Microsoft Defender Antivirus, available in the Windows Security app, which when on, provides additional protections against changes to key security features, including limiting changes which are not made directly through the Windows Security app. 'DisableScanOnRealtimeEnable'=dword:00000001 Why to disable Tamper Protection 'DisableOnAccessProtection'=dword:00000001 'DisableBehaviorMonitoring'=dword:00000001 'DisableRealtimeMonitoring'=dword:00000001Īdditionally, the Registry files contain the following values for the real-time protection options Note: Even if you are running 64-bit Windows you must still create a 32-bit DWORD value. Under the key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender, they will set the following 32-bit DWORD values. The above registry files will modify the following Registry keys and values. Use it to re-enable Defender later, and restart the OS after applying it. The ZIP archive contains the undo file, called Restore Windows Defender in Windows 10.reg. Double click on the Disable Windows Defender in Windows 10.reg file to merge it.You can place the files directly to the Desktop. Download the following ZIP archive: Download ZIP archive.Otherwise you won't be able to permanently disable the app. Disable the Tamper Protection feature.Temporarily Enable or Disable Microsoft Windows Defender To Disable Windows Defender in Windows 10