--- title: Windows Security Tamper Prevention slug: windows-security-tamper-prevention docTags: createdAt: 2026-10-20T15:59:46.190Z --- # Enterprise *** ## ESM Security Setting - Family UI Policy **Description**: Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete. **Why It's Important**: Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete. **Learn More** - [WindowsDefenderSecurityCenter Policy CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter?WT.mc_id=Portal-fx#disablefamilyui) *** # Privileged *** ## PSM Security Setting - Company Name Policy **Description**: The company name that is displayed to the users. `CompanyName` is required for both `EnableCustomizedToasts` and `EnableInAppCustomization`. If you disable or do not configure this setting, or do not have `EnableCustomizedToasts` or `EnableInAppCustomization` enabled, then devices will not display the contact options. Value type is string. Supported operations are Add, Get, Replace and Delete. **Why It's Important**: This policy displays the company name in Windows Security, helping SHIELD clearly identify privileged devices and reinforce trust in official security notifications. **Learn More** - [WindowsDefenderSecurityCenter Policy CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter?WT.mc_id=Portal-fx#companyname) *** ## PSM Security Setting - Clear Tpm Button Policy **Description**: Disable the Clear TPM button in Windows Security. - Enabled\:The Clear TPM button will be unavailable for use. - Disabled\:The Clear TPM button will be available for use on supported systems. - Not configured: Same as Disabled. Supported values: - 0 - Disabled (default) - 1 - Enabled **Why It's Important**: This policy removes the option to clear the TPM from Windows Security, ensuring SHIELD preserves hardware-based keys and prevents users from accidentally or maliciously disabling device protection. **Learn More** - [WindowsDefenderSecurityCenter Policy CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter?WT.mc_id=Portal-fx#disablecleartpmbutton) *** ## PSM Security Setting - Family UI Policy **Description**: Use this policy setting if you want to disable the display of the family options area in Windows Defender Security Center. If you disable or do not configure this setting, Windows defender Security Center will display this area. Value type is integer. Supported operations are Add, Get, Replace and Delete. **Why It's Important**: This policy disables the Family options area in Windows Security, allowing SHIELD to reduce user confusion and keep the security interface focused on enterprise-managed controls. **Learn More** - [WindowsDefenderSecurityCenter Policy CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter?WT.mc_id=Portal-fx#disablefamilyui) *** ## PSM Security Setting - Email Policy **Description**: The email address that is displayed to users. The default mail application is used to initiate email actions. If you disable or do not configure this setting, or do not have `EnableCustomizedToasts` or `EnableInAppCustomization` enabled, then devices will not display contact options. Value type is string. Supported operations are Add, Get, Replace and Delete. **Why It's Important**: This policy displays a trusted support email in Windows Security, allowing SHIELD users to contact the official help channel directly and avoid reliance on unverified sources. **Learn More** - [WindowsDefenderSecurityCenter Policy CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter?WT.mc_id=Portal-fx#email) *** ## PSM Security Setting - Customized Toasts Policy **Description**: Enable this policy to display your company name and contact options in the notifications. If you disable or do not configure this setting, or do not provide `CompanyName` and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will display a default notification text. Value type is integer. Supported operations are Add, Get, Replace, and Delete. **Why It's Important**: This policy enables customized notifications in Windows Security, allowing SHIELD to display the company name and trusted contact details so users can reach official support directly. **Learn More** - [WindowsDefenderSecurityCenter Policy CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter?WT.mc_id=Portal-fx#enablecustomizedtoasts) *** ## PSM Security Setting - In App Customization Policy **Description**: Enable this policy to have your company name and contact options displayed in a contact card fly out in Windows Defender Security Center. If you disable or do not configure this setting, or do not provide `CompanyName` and a minimum of one contact method (Phone using Skype, Email, Help portal URL) Windows Defender Security Center will not display the contact card fly out notification. Value type is integer. Supported operations are Add, Get, Replace, and Delete. **Why It's Important**: This policy enables in-app customization in Windows Security, allowing SHIELD to display official contact details and company information directly to users for trusted support. **Learn More** - [WindowsDefenderSecurityCenter Policy CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter?WT.mc_id=Portal-fx#enableinappcustomization) *** ## PSM Security Setting - Phone Policy **Description**: The phone number or Skype ID that is displayed to users. Skype is used to initiate the call. If you disable or do not configure this setting, or do not have `EnableCustomizedToasts` or `EnableInAppCustomization` enabled, then devices will not display contact options. Value type is string. Supported operations are Add, Get, Replace, and Delete. **Why It's Important**: This policy displays a dedicated support phone number in Windows Security, allowing SHIELD users to quickly reach help and ensuring issues are routed through trusted channels. **Learn More** - [WindowsDefenderSecurityCenter Policy CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter?WT.mc_id=Portal-fx#phone) *** ## PSM Security Setting - URL Policy **Description**: The help portal URL this is displayed to users. The default browser is used to initiate this action. If you disable or do not configure this setting, or do not have `EnableCustomizedToasts` or `EnableInAppCustomization` enabled, then the device will not display contact options. Value type is Value type is string. Supported operations are Add, Get, Replace, and Delete. **Why It's Important**: This policy sets a custom help URL in Windows Security, allowing SHIELD to direct users to the SHI Lab support portal for guidance and faster issue resolution. **Learn More** - [WindowsDefenderSecurityCenter Policy CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-WindowsDefenderSecurityCenter?WT.mc_id=Portal-fx#url) *** ## PSM Security Setting - Tamper Protection Policy **Description**: Tamper protection helps protect important security features from unwanted changes and interference. This includes real-time protection, behavior monitoring, and more. Accepts signed string to turn the feature on or off. Settings are configured with an MDM solution, such as Intune and is available in Windows 10 Enterprise E5 or equivalent subscriptions. **Why It's Important**: This policy enforces Tamper Protection, allowing SHIELD to prevent attackers or users from disabling critical security features like real-time protection and behavior monitoring. **Learn More** - [Defender CSP | Microsoft Learn](https://learn.microsoft.com/en-us/windows/client-management/mdm/defender-csp?WT.mc_id=Portal-fx)