Will Microsoft Defender for Endpoint prevent user to change settings in Windows security?

1. No, allow or block file nothing to do with preventing user to change the security settings. Tamper protection can prevent security settings beings changed..

2. Reason for seeing message "..managed by administrator" is either those settings are managed by configuration management tools like group policy, mecm, intune...