I'm stuck with Windows Defender security settings even if I'm PC admin

Question

To help my IT admin, I joined a lot of my Windows machines to Azure AD where my company set its domain.

To be precise the join has been done with this Windows feature:

When the test finished, I removed the join with the same Work and school tool and a bad surprise came out: the MS Defender settings now belonged to my company, precisely to my company administrator.

I'm speaking of Real-time protection, Cloud-delivered protection, Automatic sample submission, and Tamper protection.

I can't add folder exception to Defender scan, I can ignore reported files...

In other word a mess...

After some attempts I successfully solved the problem of Real-time protection and Cloud-delivered protection that now are again under my control.

To regain control I used Edit group policy this way:

• for Cloud-delivered protection, go to "Computer configuration\Administrative Templates\Windows Components\Microsoft Defender Antivirus\MAPS" and Enable "Configure local setting override for reporting to Microsoft MAPS"
• for Real-time protection, go to "Computer configuration\Administrative Templates\Windows Components\Microsoft Defender Antivirus\Real-time protection" and Enable all the entries starting with "Configure local..."

Anyway now the situation is this:

I want to recover control on "Automatic sample submission" and "Tamper protection" and, possibly, I want to reset the entire authorization for Security but the Reset/Repair button for this feature does nothing.

It's clear a bug in Windows but I'm not interested in reporting the bug to wait for a future resolution. I want to solve the problem now.

Is there someone who know how it could be done beside a complete Windows installation?

My system is Windows 11 22h2 (build 22621.1848) and I am (hypothetically) the administrator of this machine.

Answer 1

Glad to help!

Answer 2

Done, thank you.

Answer 3

Hi GNepik,

I am Dave, I will help you with this.

I apologize, Community is just a consumer forum, due to the scope of your question can you please post this question to our sister forum on Microsoft Q&A (The System Admins and IT Pro Forum)

Over there you will have access to a host of System Admins and IT Pro experts and will get a knowledgeable and quick answer to this question.

https://docs.microsoft.com/en-us/answers/index....