Force Disable Tamper Protection

Step 1 

Please disable Tamper Protection from Sophos Central Endpoint Protection Advanced Account.

IF CANNOT 

Step 2

Please disable Tamper Protection from PC/Laptop. 

IF CANNOT 

Step 3

Please stop all Sophos services.

IF CANNOT 

Step 4

i) Boot the system into Safe Mode

ii) Click Start > Run > services.msc > right click Sophos Anti-Virus service > properties > set to disabled > OK 

iii) Click Start > Run > and type regedit and then click OK 

iv) Go to the following location in the registry editory: 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SophosMCS Agent and set the REG_DWORD Start to 0x00000004

v) Go to the following location in the registry edior:

HKEY_LOCAL_MACHINE\SYTEM\CurrentControlSet\Services\SophosEndpoint Defense\TamperProtection\Config and set the following REG_DWORD values SAVEnabled and SEDEnabled to 0

vi) Go to the following location in the registry editor:
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\SAVService\TamperProtection and set the REG_DWORD Enabled to 0

vii) Reboot the system in normal mode