Skip to content

Turn off Tamper Protection

You must be an Admin or a Super Admin to use this feature.

Restriction

Tamper protection is not available for Linux devices.

You can turn tamper protection off for all your Windows computers, Windows servers, and Macs.

You must turn off tamper protection before you make changes to the local Sophos configuration or if you want to uninstall an existing Sophos product. To turn off tamper protection locally, you need the tamper protection password.

For all endpoints or servers

  1. In Sophos Central, go to My Products > General Settings.
  2. Under General, click Tamper Protection.
  3. Move the slider to the left to turn off tamper protection.

For specific endpoints or servers

  1. In Sophos Central, go to Devices > Computers and servers.
  2. Click your device's name.
  3. In the device details, scroll down to Tamper Protection, then click Turn off tamper protection.

Note

Users who aren't administrators are still prompted to enter the tamper protection password to access the Sophos Endpoint Agent settings.

On the Sophos Endpoint Agent on a Windows device

  1. In Sophos Central, go to Devices > Computers and servers.
  2. Click your device's name.
  3. Scroll down to Tamper Protection, then click View password details.
  4. Make a note of the password.
  5. Sign in to your Windows device.
  6. Open the Sophos Endpoint Agent.
  7. Click Admin sign-in.
  8. Type the tamper protection password.
  9. Click Settings.
  10. Select Override Sophos Central Policy for up to 4 hours.
  11. Turn off tamper protection, and then click Save.

Note

Sophos Central automatically turns on tamper protection after four hours.

Note

If you have issues opening the Sophos Endpoint Agent, see Sophos Central: Use SEDcli.exe to locally manage Tamper Protection settings.

On the Sophos Endpoint Agent on a macOS device

  1. In Sophos Central, go to Devices > Computers and servers.
  2. Click your device's name.
  3. In the device details, scroll down to Tamper Protection, then click View password details.
  4. Make a note of the password.
  5. Sign in to your macOS device.
  6. Click Sophos Endpoint on the dock bar.
  7. Click Admin login.
  8. Type the Mac admin password and click OK.
  9. Click the padlock and Sophos icon, then type the tamper protection password in the dialog box.
  10. Click Settings.
  11. Select Override Sophos Central Policy for up to 4 hours.
  12. Turn off tamper protection, and then click Save.

Note

Sophos Central automatically turns on tamper protection after four hours.

For more information about tamper protection, see Tamper Protection.