RTP Disabling Issue

Looking for insight with a Windows Defender issue. Client is using Microsoft Defender for Endpoint. The issue is that Real Time Protection is enabled on certain Servers where it should not be. They have a GPO that is supposed to disabled that function. I have included a picture to reference a server that has RTP enabled and one that has RTP disabled. I would appreciate any information on this as I have continuously scoured the interwebs for answer including forums.

I do see TamperProtection and TamperProtectionSource keys under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features with a value of 5 and 65 on a server that has RTP enabled, even with a GPO set to disable it:

And from a server that has a GPO to disable RTP, and it is being disabled correctly: