Forum Discussion
winny123
Jun 29, 2025Copper Contributor
Change tamper protected settings permanently
Hi there, I need to disable real-time monitoring permanently on a device. I can turn it off temporarily using troubleshooting mode but once tamper protection is back on, so is real-time monitoring. ...
Nathan_McNulty
Aug 13, 2025Copper Contributor
Tamper Protection enforces real-time monitoring (even if disabled in policies), so you must disable Tamper Protection to turn off real-time monitoring.
If you have Intune, you can use a Windows Security Experience policy to disable Tamper Protection on devices in the group you target with the policy. You can find this policy under Endpoint security - Antivirus - Create policy - Windows / Windows Security Experience.
Once applied to the device, you will then be able to disable real-time protection.