About Enhanced Tamper Protection

Enhanced Tamper Protection builds on the functionality of Tamper Protection. If Enhanced Tamper Protection is enabled, the following actions are blocked for Sophos Anti-Virus, Sophos AutoUpdate, Sophos Management Communication System, Sophos Remote Management System and Sophos Endpoint Defense:

• Stopping services from the Services UI
• Killing services from the Task Manager UI
• Changing service configuration from the Services UI
• Stopping services/editing service configuration from the command line
• Uninstalling
• Reinstalling
• Killing processes from the Task Manager UI
• Deleting or modifying protected files or folders
• Deleting or modifying protected registry keys