First imporessions on Windows 1903
Added 2019-03-27 08:37:40 +0000 UTCI was testing private win10 with windows 1903 and MSFT seam to try to patronize users even more in this build. The windows defender can not longer be disabled using the GPO's
They have added a temper protection feature that overwrites GPO's and needs to be disabled manually in the defender UI, it changes the reg value:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features]
"TamperProtection" = dword:00000000
The key is protected as a 3rd party tool can not modify it even when running as TrustedInstaller
I'm looking into how to get around this, but as it seams at least a reboot will be necessary, or well manually changing the setting.
