Best way to mass uninstall Sophos on 1,000+ Endpoints?

Hi,

I have been tasked with uninstalling Sophos on over 1,000 endpoints and I am not sure the best way to go about it.

While in central.sophos.com, clicking on a computer, this is what I see installed on it:

Is there anything that I can do from Sophos central, for example, see the red underline in image below.  i.e. can I uninstall the software from each endpoint from here? What does delete do?

If I can't uninstall from Sophos Central, what approach would you recommend for uninstalling on all 1,000+ Endpoints.  I'd imagine there must be a solution here other than manually going on each computer and uninstalling it.  

Thanks for your help.



Added TAGs
[edited by: Qoosh at 10:55 PM (GMT -7) on 10 Aug 2022]
Parents
  • Hi Chris,

    Thanks for reaching out to the Sophos Community Forum. 

    If you're looking to remove Sophos from all devices in your environment, starting with the UI you highlighted here would be a good idea. You can select "No protection (Remove any current protection)".

    Once these components are removed, the device will need to be rebooted, otherwise, the next step may not succeed.

    Now, the number of items needing to be removed from the devices will be much fewer, and the uninstall process will be much quicker. You can then remove all remaining components by running the following command line.
    - C:\Program Files\Sophos\Sophos Endpoint Agent\uninstallcli.exe

    You can use the following guide to create a startup or shutdown script to run the uninstall command as well. 
    - Sophos Central Windows Endpoint: Automate the software deployment to computers

    The uninstallcli.exe will also work to uninstall all components for you, though users may see some UI windows come up asking for reboots to be performed. 

    Kushal Lakhan
    Global Community Support Engineer
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Reply
  • Hi Chris,

    Thanks for reaching out to the Sophos Community Forum. 

    If you're looking to remove Sophos from all devices in your environment, starting with the UI you highlighted here would be a good idea. You can select "No protection (Remove any current protection)".

    Once these components are removed, the device will need to be rebooted, otherwise, the next step may not succeed.

    Now, the number of items needing to be removed from the devices will be much fewer, and the uninstall process will be much quicker. You can then remove all remaining components by running the following command line.
    - C:\Program Files\Sophos\Sophos Endpoint Agent\uninstallcli.exe

    You can use the following guide to create a startup or shutdown script to run the uninstall command as well. 
    - Sophos Central Windows Endpoint: Automate the software deployment to computers

    The uninstallcli.exe will also work to uninstall all components for you, though users may see some UI windows come up asking for reboots to be performed. 

    Kushal Lakhan
    Global Community Support Engineer
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Children