How to change startup "Sophos Clean" and the "Sophos Safestore" services mode from Automatic to Manual at Windows Server

Hi Alejandro, 

Thanks for reaching out to the Sophos Community Forum. 

May I ask why you are trying to change the startup type on these services? Making this change may cause Sophos Endpoint to run unpredictably in the event of a threat.

Have you tried disabling Tamper Protection prior to changing the startup type? 

Hi Kushal!

We need change these because the module "Server Manager" part of Windows Server interprets as an error those services with automatic startup mode but that are stopped. And this affects our monitoring of alerts in the services of the Servers. 

This problem can be solved by changing the startup mode of the service from automatic to manual, and this change should not affect the operation of SOPHOS.

Thanks for clarifying. I had a chance to test the change to startup-type on a VM and can confirm that a malware test file is cleaned up successfully. 

May I ask where you found the quoted text in your comment? 

Ask support to upgrade you to 2022.1. Those services are removed assuming you have 2016, 2019 or 2022.

You are getting access denied due to tamper protection.

Greetings!

I have installed this versions:

managed threat response 2.3.0.38

server anti-virus 10.8.11.4

server core agent 2.20.13

server intercept x 2021.3.1.11

Is any of these versions the most new one? Is ok that the 2 services mentioned remain existing?

According our versions installed we need to ask support any upgrade?

Greetings!

I have installed this versions:

managed threat response 2.3.0.38

server anti-virus 10.8.11.4

server core agent 2.20.13

server intercept x 2021.3.1.11

Is any of these versions the most new one? Is ok that the 2 services mentioned remain existing?

According our versions installed we need to ask support any upgrade?

That is 2021.3 and still has the SAV component. If you contact Support with your tenant id, which is the guid on the Support page in Central and ask for 2022.1, that should get you 2022.1 and SAV component will also be removed.

Ok!

We will proceed to contact Support by our tenant id.

Thankyou so much your time and suggestions.

Best regards and happy weekend