Windows 10 Tamper Protection Greyed Out: Why You Cannot Change This Defender Setting

You open Windows Security > Virus & threat protection settings and scroll to Tamper Protection. The switch is grey and cannot be moved, sometimes with a note saying “This setting is managed by your administrator.” When Windows 10 Tamper Protection greyed out blocks the switch, something other than you is controlling Microsoft Defender.

Tamper Protection stops malware and unwanted programs from turning off Defender’s protection or changing its settings. Because it guards against tampering, it can only be changed through the Windows Security app by an administrator, or centrally by an organisation’s management tools.

If a third-party antivirus is installed, Defender may be in passive mode, and the slot mahjong switch can appear unavailable. On work PCs, Microsoft Intune or similar tools often lock it on purpose.

The fix depends on which of these is in control.

Possible Causes

The switch is greyed out for these reasons:

• An organisation manages the PC and controls Tamper Protection centrally.
• Another antivirus product is active and Defender is not the main protection.
• Leftover policies from a removed security tool or “tweaker” control Defender.
• You are signed in with a standard account.

Malware sometimes sets policies to make Defender appear managed, so an unexpected “managed” message on a home PC deserves a closer look.

Quick Fixes to Try First

Check who controls Defender.

1. Open Windows Security > Virus & threat protection and look for messages about another antivirus provider.
2. Sign in with an administrator account and check the setting again.
3. Open Settings > Accounts > Access work or school and see whether a work account is connected.
4. Uninstall leftover antivirus programs using their official removal tools.
5. Restart and recheck Tamper Protection.

Tamper Protection is only available on supported Defender versions. If the setting is missing or locked, install pending Windows updates so the Defender platform is current.

Advanced Steps for Stubborn Cases

Remove leftover policies on home PCs.

1. Press Windows + R, type regedit, and go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender.
2. Look for values such as DisableAntiSpyware or DisableRealtimeMonitoring.
3. Export the key, then delete these values if you did not set them on purpose.
4. Restart, then run a Microsoft Defender Offline scan to check for hidden malware.
5. Open Windows Security again and turn Tamper Protection on.

On a company device, contact IT, since central management will override local changes.

Before You Go Further: Keep Your Files Safe

Keep Tamper Protection on whenever possible; it is one of the strongest defences against ransomware disabling your antivirus. Back up important files before removing security policies.

Conclusion

A greyed-out Tamper Protection switch means another tool or organisation controls Defender. Check for other antivirus software and work accounts, remove leftover policies on home PCs, and scan for malware.