A customer requested would be a report of the dates that the endpoints were installed, this option is not found in records and reports. Would you know if there is that option?
Thank you
LAZ
This thread was automatically locked due to age.
Hello Laz,
Thank you for contacting the Sophos Community. If you would like to see this implemented into our products going forward, I recommend submitting a feature request. It looks like someone already has a similar request sent in.
- https://ideas.sophos.com/forums/285723-endpoint-protection/suggestions/43787271-sophos-central-device-page-endpoint-installed-d
While testing out some queries using "Live Discover" I was able to create the following Query that will return the "InstallDate" from the registry. You are welcome to use this in the meantime.
SELECT data AS DateInstalled, path from registry where key like 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos Endpoint Agent' and name = 'InstallDate';
