diff --git a/articles/windows-mdm-setup.md b/articles/windows-mdm-setup.md
index e2b0ad2c28..a3b2587229 100644
--- a/articles/windows-mdm-setup.md
+++ b/articles/windows-mdm-setup.md
@@ -46,6 +46,8 @@ Restart the Fleet server.
 
 With Windows MDM turned on, enroll a Windows host to Fleet by installing [Fleet's agent (fleetd)](https://fleetdm.com/docs/using-fleet/enroll-hosts).
 
+> Windows [tamper protection](https://learn.microsoft.com/en-us/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection) is disabled on a host when MDM is turned on.
+
 ## Automatic enrollment
 
 > Available in Fleet Premium