Intercept X / Scan Report after Full Scan

Hi Lutz Radtke ,

If you have Windows devices, the default log location for "Scheduled" and "Scan now" scans is C:\ProgramData\Sophos\Endpoint Defense\Logs and you can look at the SophosScanCoordinator.log file. Does that have the information that you need?

  Hi Gladys ,  

  thanks for your information.    

  Unfortunately, that's not enough.    

  This is where the information used to be hidden, in the old Sophos Endpoint Protection.    

  Since Intercept X switched to the cloud, all of the logs can no longer be accessed.    

  When I try to open the "Endpoint Defense" folder, I don't have permission.    

  I'm just a user. If I use the local administrator, I can't open it either.    

  If I start Windows with the profile as local administrator and navigate there, I also lack authorization.    

  But I have full access to this directory. Where is my mistake?  

I assume that is tamper protection.

If you open a CMD or PS window as admin, so it's elevated, you should then be able to open the file, e.g.

notepad "C:\ProgramData\Sophos\Endpoint Defense\Logs\SophosScanCoordinator.log"

If you want more info out of the log:

Great thank you!
I'll test this out after a full scan

I have to copy it to the desktop or somewhere else with a somewhat complicated Xcopy command, but it works with an admin CMD.
Thank you for the information and the idea.
I liked getting a kind of "overview" like in Windows Defender or the old Sophos Endpoint solution 
in the "app" better, as the user on site (without admin rights) could open it and show it.

I have to copy it to the desktop or somewhere else with a somewhat complicated Xcopy command, but it works with an admin CMD.
Thank you for the information and the idea.
I liked getting a kind of "overview" like in Windows Defender or the old Sophos Endpoint solution 
in the "app" better, as the user on site (without admin rights) could open it and show it.