Forum Discussion
How to disable defender and tamper protection temporarily
iirokaksonen You can create a policy just for your device from Intune (then excluding your device from the one that activates the feature)
Using Microsoft Intune to Disable Tamper Protection:
-Go to Microsoft Endpoint Manager Admin Center.
-Navigate to Endpoint Security > Endpoint Detection and Response.
-Look for Tamper Protection, and set it to Disabled.
After making this change, sync the policy with your device:
Go to Devices in Intune, find your device, and click on Sync.
When I go to endpoint security, i see no devices there 😮
- am1357Oct 13, 2024Brass Contributor
You mentioned you have a Business Premium license which probably means you're using Defender for Business. Not sure if this works in Defender for Business but there is a troubleshooting mode where you can disable tamper protection locally on one device for four hours.
https://learn.microsoft.com/en-us/defender-endpoint/enable-troubleshooting-mode#enable-troubleshooting-mode
Two more articles that apply to your situation and how to disable tamper protection
- Disable globally - NOT recommended
- https://learn.microsoft.com/en-us/defender-endpoint/manage-tamper-protection-microsoft-365-defender
- Disable via Intune
- https://learn.microsoft.com/en-us/defender-endpoint/manage-tamper-protection-intune
The bigger question is, why exactly do you want to disable tamper protection?
- Disable globally - NOT recommended