About enhanced tamper protection

Enhanced tamper protection builds on the functionality of tamper protection. If enhanced tamper protection is enabled, the following actions are blocked for Sophos Anti-Virus, Sophos AutoUpdate, Sophos Management Communication System, Sophos Remote Management System and Sophos Endpoint Defense:

  • Stopping services from the Services UI
  • Killing services from the Task Manager UI
  • Changing service configuration from the Services UI
  • Stopping services/editing service configuration from the command line
  • Uninstalling
  • Reinstalling
  • Killing processes from the Task Manager UI
  • Deleting or modifying protected files or folders
  • Deleting or modifying protected registry keys
Important To enable enhanced tamper protection, tamper protection must be enabled. If tamper protection is disabled, enhanced tamper protection will automatically be disabled.