Advisory: Support Portal Maintenance. Login is currently unavailable, more info available here.
I am trying to re-install Sophos Endpoint on a computer. When I go to SERVICES.MSC on the computer, the Sophos items are grayed out. I tried to uninstall and I got the message "Tamper Protection must be disabled." The device does not show up on the list when I go to the Sophos dashboard. How do I fix this problem?
Hi,
maybe your device got deleted on Sophos Central.
Tamper Protection passwords can be retrieved for deleted endpoints and servers from Sophos Central. This option is located in Logs & Reports > Recover Tamper Protection passwords. This password can be used to authenticate on the local endpoint or server, allowing access to the Settings and the option to disable Tamper Protection.
Here you can open a list of deleted endpoints and click on View Password Details to get the last tamper protection code, to be able to uninstall Intercept X.
Please provide feedback if this helped
Thanks,
IntrususSophos Certified Engineer | Sophos Certified Technician
private lab: XG firewall with SFOS 18.0.3 MR-3Intercept X Advanced (for Server) with EDR EAP latest If a post solves your question use the 'Verify Answer' link
I went to the Recover Tamper Protection link and the device was not there. I thought that if I ran a scan using Sophos Endpoint Agent it would be picked up but it wasn't.
This is strange, indeed.
Please do the following:
Please provide feedback, then we can investigate further.
Thanks
That still didn't work.
I ran the Diagnostic Tool and this is the website link it created: https://sdu-feedback.sophos.com/prod/5631610c-a8b2-5b85-95de-22658599975b_2020-12-03-20-01-47.zip
The Diagnostic Tool also said "Last communication failed with error '401'".
Hi Sophos User3457
Could you please try to recover tamper protection with the help of this article and then re-register the endpoint on the central dashboard with the following steps:
You can also uninstall completely with the help of the Sophos ZAP tool and then re-install the endpoint.
Shweta
I ended up using the Sophos Zap application and re-installed the program. When I went into Safe Mode and did all the steps the Sophos items in Services were still grayed out. I tried to uninstall the program after doing all the steps and I got the message "Uninstallation failed. Update is currently in progress. Please wait for the update to finish." Thank you for the steps and the application.
Could you please check under C:\Windows\Temp for Sophos uninstall logs and provide the exact error you are seeing? A screenshot of the Sophos endpoint Endpoint self-help with installed components would be helpful
Sophos Standalone Engine Install Log 20201204 142415.txt
I don't have a screenshot of the error message any more. This is one of the log files that were created. Right now the device is shown on the Sophos dashboard.