1. A system for preventing unauthorized modification of an operating system, comprising: a processing unit; a system memory in communication with said processing unit; an operating system for controlling the operation of said processing unit, said operating system comprised of kernel code; and an enforcement agent executing at a higher privilege than said kernel code such that any changes to said kernel code are approved by the enforcement agent.