Windows Defender disabled settings bug in W11

[xbacox2010]

Hi, i try a lot of time to disable windows defender with ntlite but always start enable
build 20000.348

 

[Clanger]

look for Tamper Protection in Settings, it might be the cause.

 

[nuhi]

xbacox2010, image or deployed (c:\Windows)?
If image, preset please.
If deployed, then as Clanger said, to add just in case, see Apply page warning, disable Tamper protection, reboot, then do the disabling.
Windows requires reboot after Tamper disabling, and it doesn't state so.

 

[Clanger]

It could be a bug or Tamper Protection, maybe ms has slipped a new protection for Defender as they are ramming it down our throats, like they did with One Drive and are now doing with Edge.

 

[xbacox2010]

yes, i disable tamper and defender in ntlite but anyways will start

 

[xbacox2010]

Well.. the problem is Tamper protection, in w11 the value for disable is 4 and in w10 is 0

 

[garlin]

https://www.tenforums.com/tutorials...fender-antivirus-post2004702.html#post2004702

Brink said:
I'm not sure what a 4 value stands for this, but 0 = off and 5 = on (default).

A late reply, I know, but from my own tests (changing the states of Defender components and refreshing the registry) it looks like a DWORD value of 4 indicates both Tamper Protection and Cloud-delivered protection have been set to OFF:

 

[xbacox2010]

https://www.tenforums.com/tutorials...fender-antivirus-post2004702.html#post2004702

0 for w10 and 4 for w11.. i think thath ntlite need upgrade about this

 

[garlin]

No, the point is 0 and 4 both disable Tamper Protection but 4 touches two settings.

When you use control panel, the "master" switch can turn off multiple settings. NTLite needs to be specific as possible, since some user might want Cloud-delivered Protection but not Tamper Protection.