Turning off Tamper Protection

Hi

I'm trying to turn off tamper protection on an Endpoint. I turned it off via the admin interface, but the change has still not accrued on the endpoint, even after a reboot. I notice there is a Tamper protection password, but there is no place on the Endpoint to enter it that I have found. All tamper protection stuff is grayed out.

Whats the proper way to turn off Tamper protection?

Edit,
also how long does it take for Exceptions made on the UTM to be pushed out to endpoints? I added a file and it is still flagged as a PUA, even after clicking update on the endpoint.