---
title: "Preventing end-users from changing DLP Endpoint for macOS settings"
slug: "preventing-end-users-from-changing-dlp-endpoint-macos-settings-1-1"
updated: 2026-11-05T14:30:37Z
published: 2026-11-05T14:30:37Z
canonical: "docs.trellix.com/preventing-end-users-from-changing-dlp-endpoint-macos-settings-1-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Preventing end-users from changing DLP Endpoint for macOS settings

The Self Protection feature safeguards the Trellix DLP Agent from unauthorized tampering or process termination. It prevents local users, malicious processes, and administrative accounts from disabling security controls. Self Protection ensures that DLP enforcement remains continuously active on endpoints, even during an attack.

> [!NOTE]
> Note
> 
> If Endpoint Security for macOS (ENSM) is installed alongside Trellix DLP, the ENSM policy governs Self Protection instead of the DLP Client Configuration.

## Verify Self Protection status

Self Protection is pre-enabled by default to ensure local users and malicious processes cannot terminate security services, keeping your data loss prevention controls active at all times. To verify the status of self protection, use these steps:

1. In Trellix ePO, select **Menu → Policy → Policy Catalog.**
2. From the Product drop-down list, select **Data Loss Prevention**, then select **Mac Client Configuration.**
3. Select a configuration to edit, or click **Duplicate** for the Trellix Default configuration.
4. Under **Settings**, select **Advanced Configuration.**
5. Go to **Access Protection Settings** and verify that the status of DLP Access Protection is **Enabled.**