Forum Discussion
Manik1
Mar 05, 2025Copper Contributor
Unable to enable tamper protection using MDM
I’m working on implementing Tamper Protection for Windows devices using a custom MDM solution with the Defender CSP, but I’ve run into some issues and could use your help. A couple of questions: Wh...
luchete
Mar 06, 2025Steel Contributor
Hello Manik1,
It sounds like you’re on the right track with the Defender CSP, but Tamper Protection requires the device to be onboarded to Defender for Endpoint first. The correct value to enable it via CSP should be <enabled/>, but ensure your MDM has the right permissions to modify security settings. Also, check if the device is enrolled in Microsoft Defender Security Center and that no conflicting policies from Intune or Group Policy are blocking the change. If Intune couldn’t enable it either, there might be a missing prerequisite in Defender for Endpoint. Hope this helps!
Regards!