Will Microsoft Defender for Endpoint prevent user to change settings in Windows security?

[KevinLin]

Hi

1. If I turn on Allow or block file ( Microsoft 365 Defender > Settings >Endpoints > General > Advanced features > Allow or block file > On), Will Microsoft Defender for Endpoint prevent user to change settings in Windows security?

2. If yes, how to let user have ability to turn it off?

    (Why I ask the question is After turn off Allow or block file, user still see "This setting is managed by your administrator")

[#2]

1. No, allow or block file nothing to do with preventing user to change the security settings. Tamper protection can prevent security settings beings changed..

2. Reason for seeing message "..managed by administrator" is either those settings are managed by configuration management tools like group policy, mecm, intune...

[#3]

About 2.
The user is local user, computer doesn't join AD, all group policy is "Not configured", we don't have MECM and Intune.

How to check what manage the setting?