Windows now has "Tamper Protection", designed to protect against "malicious and unauthorized changes to security features."

Windows Insiders have already bee using this feature for a while, but it's now generally available.

Tamper protection prevents unwanted changes to security settings on devices. With this protection in place, customers can mitigate malware and threats that attempt to disable security protection features.

Microsoft Intune enables enterprise customers to choose the form of deployment.
Home and SMEs will find Tamper Protection installed and set by default, although the feature will be turned on gradually, with some devices reporting the protection is turned on.

When a tampering attempt is detected on endpoints, an alert is raised in Microsoft Defender Security Center. Using the rich endpoint and detection response capabilities in Microsoft Defender ATP, security operations teams can investigate and resolve these attempts.

[techcommunity.microsoft.com...]