This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Access denied to stop SOPHOS Service?

Hello,

I am running this bat file:

net stop "Sophos Agent"
net stop "Sophos Anti-Virus"
net stop "Sophos Anti-Virus status reporter"
net stop "Sophos AutoUpdate Service"
net stop "Sophos Message Router"
net stop "Sophos System Protection Service"
net stop "Sophos Web Control Service"
net stop "Sophos Web Filter"
net stop "Sophos Web Intelligence Service"
net stop "Sophos Endpoint Defense Service"

C:\Windows\system32>NET STOP "SOPHOS ENDPOINT DEFENSE SERVICE"
System error 5 has occurred.

Access is denied.

The last service "Sophos Endpoint Defense Service" does not stop...

I tried to place the service in another position in the batch, it is the same issue.

I did run it by itself and it is the same issue.

What could be the cause of this access denied for only this service? Some specifics security?

Thanks,

Dom

This thread was automatically locked due to age.

Top Replies

Sophos User930 over 3 years ago +1

The Protection level on it is "PsProtectedSignerAntimalware-Light". It's not Tamper Protection making the service not stoppable: LaunchProtected is set to 3 under: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet…

Parents

0 GlennSen over 3 years ago

Hi There,

Before running the said batch file. did you disable tamper protection on SAV?

Glenn ArchieSeñas (GlennSen)

Global Community Support Engineer

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 Dominique Duchemin over 3 years ago in reply to GlennSen

Hello,

Tamper Protection is not enabled in our environment.

So the response would be Yes Tamper Protection is disabled.

Thanks,

Dom
Cancel
Vote Up 0 Vote Down

Cancel
0 Qoosh over 3 years ago in reply to Dominique Duchemin

Hello Dominique,

When trying this out on a test box, I am getting the same results. It looks like this is the expected behavior.

May I ask why you’re looking to stop this service? If tamper protection is disabled, the SED service running won’t prevent an uninstall from taking place.

Kushal Lakhan

Team Lead, Global Community Support
Connect with Sophos Support, get alerted, and be informed.
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 Dominique Duchemin over 3 years ago in reply to Qoosh

Hello Kushal

I need to stop the service as a requirement to install/upgrade applications. More and more suppliers are requesting anti-virus, anti-malware, etc... to be disabled during installation or upgrades to be sure nothing is blocked during their job...

Thanks,

Dom
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Dominique Duchemin over 3 years ago in reply to Qoosh

Hello Kushal

I need to stop the service as a requirement to install/upgrade applications. More and more suppliers are requesting anti-virus, anti-malware, etc... to be disabled during installation or upgrades to be sure nothing is blocked during their job...

Thanks,

Dom
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Qoosh over 3 years ago in reply to Dominique Duchemin

Hello Dominique,

So long as Tamper Protection is disabled, SED should not impede other installations from taking place. If you do find this to be a problem, please reach back out on this thread and we can take a closer look into things.

Thank you,

Kushal Lakhan

Team Lead, Global Community Support
Connect with Sophos Support, get alerted, and be informed.
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel