tamper protecion and sccm client

%3CLINGO-SUB%20id%3D%22lingo-sub-1399870%22%20slang%3D%22en-US%22%3Etamper%20protecion%20and%20sccm%20client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1399870%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ei've%20a%20very%20BIG%20PROBLEM%2C%20actually%20i%20manage%20my%20client%20using%20SCCM%2C%20and%20now%20we%20have%20decided%20to%20migrate%20our%20antivirus%20to%20Microsoft.%3C%2FP%3E%3CP%3EThe%20migration%20seems%20to%20be%20not%20too%20difficult%2C%20but%20today%20i%20after%20checking%20my%20pilot%20client%20i%20see%20a%20VERY%20BIG%20PROBLEM.%3C%2FP%3E%3CP%3Ewhen%20i%20set%20to%20manage%20the%20client%20using%20SCCM%2C%20the%20tamper%20protction%20label%20in%20%22windows%20Security%22%20disappear%20and%20if%20i%20do%20a%20get-mpcomputerstatus%20in%20powershell%20the%20option%20%22IsTamperProtected%22%20is%20se%20to%20off.%3C%2FP%3E%3CP%3EIf%20i%20uninstall%20the%20client%20the%20option%20in%20windows%20security%20is%20not%20going%20back.%3C%2FP%3E%3CP%3ESo%20the%20question%20is%3A%20why%20the%20SCCM%20client%20is%20not%20able%20to%20control%20the%20tamper%20protection%20%3F%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20control%20tamper%20protection%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20Regards%3C%2FP%3E%3CP%3EMassimo%20Riboli%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi all, 

 

i've a very BIG PROBLEM, actually i manage my client using SCCM, and now we have decided to migrate our antivirus to Microsoft.

The migration seems to be not too difficult, but today i after checking my pilot client i see a VERY BIG PROBLEM.

when i set to manage the client using SCCM, the tamper protction label in "windows Security" disappear and if i do a get-mpcomputerstatus in powershell the option "IsTamperProtected" is se to off.

If i uninstall the client the option in windows security is not going back.

So the question is: why the SCCM client is not able to control the tamper protection ? 

Is there a way to control tamper protection?

 

Best Regards

Massimo Riboli

1 Reply

Hi @m_riboli ,

as far as I know, Tamper Protection is only supportet if you manage the client with Intune: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/preve...

Currently there's no way to enable it if you are using SCCM/MECM.

 

Btw: If anyone from Microsoft reads this, I would love to see this feature coming to SCCM/MECM in the near future,

 

Best regards

Stefan