The endpoint security client has tamper protection which locks down the clients settings as well as the ability to uninstall it. There is a tamper protection password unique to each machine.