Hello Anete,
I see this is an old message. Hopefully you found the answer long ago.
For the record, the answer lies in setting your sde or dbo geodatabase connection to "Branch" when you want to set the DEFAULT (branch) version to "Protected".
Most likely, your direct connection was set to Traditional versioning when you altered the access permissions on Default to "protected" the first time.