We have seen an increase in customer cases in regards to "Sophos Network Threat Protection" or "Sophos Anti-Virus" failing to uninstall due to the error message RemoveSIPSSubmitterUserAccount returned actual error code 1603 as can be seen in the Sophos Network Threat Protection Uninstall.log or the Sophos Anti-Virus Uninstall.log
The root cause of this is that the SIPSSubmitterUserAccount registry entry is missing.
A machine being in this state suggests that a partial uninstall has already taken place so its likely that you may run into additional uninstall issues after this has been resolved.
This article describes the steps to resolve the issue….
The following sections are covered:
Applies to the following Sophos products and versions Central Endpoint Advanced 11.5.11Sophos Endpoint Security and Control 10.8.2Central Server Core Agent 2.1.1
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.