From 2d404fdd80ea1887dcdd8fbf5ca44923b533d072 Mon Sep 17 00:00:00 2001
From: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Date: Tue, 11 Feb 2025 16:34:13 +0100
Subject: [PATCH] Document that Windows Tamper Protection is disabled when MDM
 is turned on (#26224)

Related to:
- #24767
---
 articles/windows-mdm-setup.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/articles/windows-mdm-setup.md b/articles/windows-mdm-setup.md
index e2b0ad2c28..a3b2587229 100644
--- a/articles/windows-mdm-setup.md
+++ b/articles/windows-mdm-setup.md
@@ -46,6 +46,8 @@ Restart the Fleet server.
 
 With Windows MDM turned on, enroll a Windows host to Fleet by installing [Fleet's agent (fleetd)](https://fleetdm.com/docs/using-fleet/enroll-hosts).
 
+> Windows [tamper protection](https://learn.microsoft.com/en-us/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection) is disabled on a host when MDM is turned on.
+
 ## Automatic enrollment
 
 > Available in Fleet Premium