what are the tamperprotectionsources?

[schrx1964]

I see with the powershell command get-mpcomputerstatus tamperprotectionsource = signatures, sometimes ATP and sometimes E5 transitioning. Is there any documentation about the the different sources? Other point is that my AVD devices getting a greyed out option on the tamperprotection with tamperprotection off once it is onboarded in defender for endpoint. When i try to turn it on through MEM i get not applicable on that antivirus policy. How do i get tamperprotection to On state without turning it on in the advanced settings in the security portal

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: f31e7b39-b7c3-188a-0b2a-02ff10a5be6d
• Version Independent ID: 44940a13-0a2d-e281-560b-cb4d8a5d1ccf
• Content: Protect security settings with tamper protection
• Content Source: microsoft-365/security/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection.md
• Product: m365-security
• Technology: mde
• GitHub Login: @denisebmsft
• Microsoft Alias: deniseb

[franklesniak]

A value of 3 = "E3 transition", whatever that means :)

[denisebmsft]

@yogkumgit I have opened a work item (6329673) for this issue. Will update this issue when I know more.

[denisebmsft]

Hello @yogkumgit. We've been waiting on information from the PM. We're on hold until we hear back from him.

[denisebmsft]

Hi @yogkumgit. We've been waiting for input from our product team.