Tamper-protection settings block attempts to write to the Carbon Black App Control application directory or change Carbon Black App Control Agent files on client computers.
Tamper-protection cannot be disabled on a per-policy basis, although you can use the Advanced menu on the Computer Details page to disable it for an individual system – consult with Carbon Black Support before changing this setting.
Agents normally cannot be uninstalled unless they are in Agent Disabled mode. However, if you need to uninstall an agent without disabling it, Carbon Black Support can provide special commands to accomplish this task.
You can specify your own directory-protection policies. See Custom Software Rules
For more information about removing App Control Agent from a computer, see "Uninstalling App Control Agents" in the VMware Carbon Black App Control Agent Installation Guide.
