Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 15 subscribers
  • Views 10781 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

disable sophos tamper protection on mac

SOC User4

Hi team.

I currently have a problem, one of our clients did not renew his license, however we disabled the protection of the equipment but when uninstalling it continues to ask for the password and as it has been a long time I cannot recover it, is there any way to disable it on mac?



This thread was automatically locked due to age.
Parents
  • 0

    Hi There,

    Thank you for reaching us. You may follow the below steps to uninstall the MAC endpoint when tamper protection is turned on.

    Open terminal
    'command + spacebar' search for "terminal"

    1. vi kill_sophos
    2. Copy text below, right-click on terminal window and select 'Paste':
      #!/bin/bash
      sudo rm -R /Library/Sophos\ Anti-Virus/
      sudo rm -R /Library/Application\ Support/Sophos/
      sudo rm -R /Library/Preferences/com.sophos.*
      sudo rm /Library/LaunchDaemons/com.sophos.*
      sudo rm /Library/LaunchAgents/com.sophos.*
      sudo rm -R /Library/Extensions/Sophos*
      sudo rm -R /Library/Caches/com.sophos.*
    3. Press 'Esc' on your keyboard
    4. Enter ' :wq' and press return
      ( Colon W Q Enter)
    5. sudo chmod +x kill_sophos
    6. Enter local mac password
    7. run script by entering below on terminal
      ./kill_sophos
    8. enter password and watch everything die
    9. Open Finder and go to 'Applications'
    10. click Remove Sophos Endpoint
    11. It’ll now let you remove Sophos Endpoint without the tamper protection password.

    Let us know if you faced any issues.

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
Reply
  • 0

    Hi There,

    Thank you for reaching us. You may follow the below steps to uninstall the MAC endpoint when tamper protection is turned on.

    Open terminal
    'command + spacebar' search for "terminal"

    1. vi kill_sophos
    2. Copy text below, right-click on terminal window and select 'Paste':
      #!/bin/bash
      sudo rm -R /Library/Sophos\ Anti-Virus/
      sudo rm -R /Library/Application\ Support/Sophos/
      sudo rm -R /Library/Preferences/com.sophos.*
      sudo rm /Library/LaunchDaemons/com.sophos.*
      sudo rm /Library/LaunchAgents/com.sophos.*
      sudo rm -R /Library/Extensions/Sophos*
      sudo rm -R /Library/Caches/com.sophos.*
    3. Press 'Esc' on your keyboard
    4. Enter ' :wq' and press return
      ( Colon W Q Enter)
    5. sudo chmod +x kill_sophos
    6. Enter local mac password
    7. run script by entering below on terminal
      ./kill_sophos
    8. enter password and watch everything die
    9. Open Finder and go to 'Applications'
    10. click Remove Sophos Endpoint
    11. It’ll now let you remove Sophos Endpoint without the tamper protection password.

    Let us know if you faced any issues.

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
Children
No Data
Unfiltered HTML