After installing the Endpoint Security Agent (HX) software on your host endpoints, you can use a Removal Protection password policy to keep your agents secure. The Removal Protection password prevents unauthorized removal of the agent software from endpoints in your enterprise by requiring users to enter a password before uninstalling the agent software.
Note
The Removal Protection Password is supported for Windows agents version 27 or later.
You can configure the Removal Protection password policy for the agent default policy or any custom policy using the Web UI or the API only. You can also create a custom exclusion policy that excludes selected host sets from the agent uninstall password protection list using the Web UI only.
Important
If you run the uninstall audit on a host set that has the Removal Protection policy enabled, the uninstall audit will fail. To successfully run the uninstall audit, disable the Removal Protection policy before running the uninstall audit. See Disabling the removal protection policy for more information.
This section covers the following topics:
Admin access when using the Web UI
The Removal Protection feature requires Endpoint Security Agent (HX) version 27 or later.