We have seen an increase in customer cases regarding "Sophos Network Threat Protection" or "Sophos Anti-Virus" failing to uninstall due to the error message RemoveSIPSSubmitterUserAccount returned actual error code 1603 as can be seen in the Sophos Network Threat Protection Uninstall.log or the Sophos Anti-Virus Uninstall.log
The root cause of this is that the SIPSSubmitterUserAccount registry entry is missing.
A machine being in this state suggests that a partial uninstallation has already taken place so its likely that you may run into additional uninstallation issues after this has been resolved.
Applies to the following Sophos products and versions Central Endpoint Advanced 11.5.11Sophos Endpoint Security and Control 10.8.2Central Server Core Agent 2.1.1
"NT SERVICE\SntpService"="NT SERVICE\SntpService"
Sign up to the Sophos Support SMS Notification Service to get the latest product release information and critical issues.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.