Configure Tamper protection options in Nebula

The Tamper protection policy option in Malwarebytes Nebula protects endpoints by limiting end user ability to uninstall Malwarebytes. It also prevents malicious threats from stopping, modifying, or deleting Malwarebytes.

Tamper protection settings

To find and toggle these option's in the Nebula console:

1. On the left navigation menu, go to Configure > Policies.
2. Click New or select an existing policy.
3. Select the Tamper protection tab.  

Options in this section are as follows:

• Uninstall Protection: Stops all endpoint users from uninstalling Malwarebytes agent software by requiring a separate uninstall password. This is enabled by default for all new and cloned policies, users who attempt to uninstall the endpoint agent cannot proceed without this password. 
  • Click the show password icon to view the current password. 
  • Click the copy icon to copy the current password when shown. 
  • Click Change password to modify the current password. 
    
    
    
• Service and Process Protection (Windows only): Prevents malware from stopping, modifying, or deleting the Malwarebytes Endpoint Agent.

Notes

• Endpoint Protection or Endpoint Detection and Response are required to use both features.
• Both features do not support Windows XP endpoints.

Return to the Malwarebytes Nebula Administrator Guide.