Deploy Sophos Central endpoint with PDQ Inventory

Hi DanTaylor

This similar thread should help you. I would suggest you reach out to your account manager if at all you face any issues. 

Thanks, there's some useful stuff in that thread. I've tried using the -q switch but that didn't work

Account manager is hit and miss responding to my emails unfortunately

The other thing the customer tried was uninstalling on Prem Sophos first rather than letting Sophos Central installer do it. I could program some uninstall options into PDQ Deploy. What is the correct order to remove these components in please?

Dan

Sophos Anti-Virus
Sophos AutoUpdate
Sophos Clean
Sophos Endpoint Defence
Sophos Network Threat Protection
Sophos Remote Management System

Hi DanTaylor

You can uninstall components in the below order, If unable to find one or more components in the list, it may not be installed. Proceed with the next component: 

1. Sophos Remote Management System
2. Sophos Network Threat Protection
3. Sophos Client Firewall
4. Sophos Anti-Virus
5. Sophos AutoUpdate
6. Sophos Diagnostic Utility
7. Sophos Exploit Prevention
8. Sophos Clean
9. Sophos Patch Agent
10. Sophos Endpoint Defense

Hi DanTaylor

You can uninstall components in the below order, If unable to find one or more components in the list, it may not be installed. Proceed with the next component: 

1. Sophos Remote Management System
2. Sophos Network Threat Protection
3. Sophos Client Firewall
4. Sophos Anti-Virus
5. Sophos AutoUpdate
6. Sophos Diagnostic Utility
7. Sophos Exploit Prevention
8. Sophos Clean
9. Sophos Patch Agent
10. Sophos Endpoint Defense

Thanks

Hi, 

I try to uninstall Sophos with PowerShell scripts in suggested order:

Sophos Remote Management System

Sophos Anti-Virus

Sophos AutoUpdate

Sophos Endpoint Defense

with: Get-CimInstance -Classname Win32_Product | Where-Object Name -Like 'Sophos Anti-Virus' | Invoke-CimMethod -MethodName UnInstall

I used this script for all components changing component name in script, and it works besides Sophos Endpoint Defense, it is not uninstalling this component and what strange I can't even stop service: Sophos Endpoint Defense Service in services.

Also Sophos Endpoint Defense is visable in Programs but not when PowerShell using: get-wmiobject Win32_Product.

Any suggestion how to disabled this service and uninstall last one component of Sophos?

You will need to disable Tamper Protection on the endpoint first