In Sophos Central, go to the device and turn off Tamper Protection.
Support is available for Windows 7 and later (including ARM64 devices from version 1.2.3.0). sophoszap download