Solutionunvalidated
See Event Viewer -> Application and service logs -> `/Microsoft/Windows/Windows Defender/Operational`. Tension: In my case, I see events that indicate threat protection is the cause. Outcome: Microsoft Defender exploit Guard has blocked an operation that is not authorized by your IT administrator.
ddd64111-cd2c-4383-9fe6-ce7a6f140c11
See Event Viewer -> Application and service logs -> /Microsoft/Windows/Windows Defender/Operational. Tension: In my case, I see events that indicate threat protection is the cause. Outcome: Microsoft Defender exploit Guard has blocked an operation that is not authorized by your IT administrator.