disabling tamper protection via cmd

Hi Sophos User1175,

Thanks for reaching out to the Sophos Community Forum. 

You can turn off Tamper Protection using the CLI by running the following command.
- SEDcli.exe -OverrideTPoff <passcode>

The code will be different for each device, so this may require adjusting per device, but this command will work. I've hyperlinked above an article where you can find more details on the command as well.

@echo off
set /p "tp=Enter Tamper Protection code: "
"c:\Program Files\Sophos\Endpoint Defense\SEDcli.exe" -OverrideTPoff %tp%
net stop "Sophos MCS Client"