About enhanced tamper protection
Enhanced tamper protection builds on the functionality of tamper protection. If enhanced tamper protection is enabled, the following actions are blocked for Sophos Anti-Virus, Sophos AutoUpdate, Sophos Management Communication System, Sophos Remote Management System and Sophos Endpoint Defense:
- Stopping services from the Services UI
- Killing services from the Task Manager UI
- Changing service configuration from the Services UI
- Stopping services/editing service configuration from the command line
- Uninstalling
- Reinstalling
- Killing processes from the Task Manager UI
- Deleting or modifying protected files or folders
- Deleting or modifying protected registry keys
Important To enable enhanced tamper protection, tamper protection must be
enabled. If tamper protection is disabled, enhanced tamper protection will automatically
be disabled.