This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to uninstall Sophos Endpoint Agent when Tamper Protection password is lost

Hi there,

I've installed Sophos Endpoint Agent onto my laptop and now want to delete it as I've found out I don't need it. However, Tamper Protection is preventing me from uninstalling. I've been into Control Panel and uninstall, but a pop-up appears saying that Tamper Protection must be disabled before I can uninstall it.

I've tried rebooting my laptop in safe mode and gone into Regedit and changed items in there and it seemed to of stopped Sophos and I could browse the web. However it didn't resolve the issue and it's still installed but I could do more on my laptop yesterday, but when I've gone back on my laptop today, it's gone back to square one and it's blocked websites that I would need to use for work (i.e. social media).

How can I uninstall Sophos Endpoint Agent when I don't have the Tamper Protection password? Or how to disable Tamper Protection so that I can uninstall Sophos Endpoint Client?

This thread was automatically locked due to age.

Parents

0 QC over 5 years ago

Hello Matthew Yeend,

Sophos Endpoint Agent
sounds like either Sophos Central or UTM. Both are managed centrally (Web Admin or UTM respectively), from there you can turn off Tamper Protection.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Matthew Yeend over 5 years ago in reply to QC

Hi Christian,

Thanks for the reply. How to I get to the Sophos Central or UTM?

Thanks,

Matt
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 5 years ago in reply to Matthew Yeend

Hello Matt,

a UTM is a firewall so you'd definitely know you have one (and how to access it).

Sophos Central requires a license and you'd have to sign up on the web to obtain the download link - again you'd remember. AFAIK Sophos Home (yet another option) whether licensed or free does not include TP and it also requires you to sign up.
As you are asking I'm not sure which version you have installed - where did you get it from?

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Matthew Yeend over 5 years ago in reply to QC

I'm unsure of what licence we have (I installed the installation from the works shared drive) so I'm unsure which version it is I installed. When I contacted IT support (of which I am) they had no idea how to uninstall. As far as I can tell, the file version is: 1.5.70.0?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Matthew Yeend over 5 years ago in reply to QC

I'm unsure of what licence we have (I installed the installation from the works shared drive) so I'm unsure which version it is I installed. When I contacted IT support (of which I am) they had no idea how to uninstall. As far as I can tell, the file version is: 1.5.70.0?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 QC over 5 years ago in reply to Matthew Yeend

Hello Matt,

1.5.70.0
doesn't ring a bell. But whoever put it on the shared drive should know. There should be a Sophos icon on the task bar (maybe it's hidden) and (if I'm not mistaken) a Sophos program group that provide a link to open the GUI. I'm not familiar with the Central GUI but I'm sure it has the version information somewhere and the place shouldn't be too hard to find.

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Matthew Yeend over 5 years ago in reply to QC

Hi Christian,

I'm unsure which version it is. Unfortunately the person that put it on the shared drive isn't in today so I'm unable to talk to them.

Matt
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 5 years ago in reply to Matthew Yeend

Hello Matt,

the recommended way is to centrally disable it. There's an article for emergency situations though ...

Christian
Cancel
Vote Up 0 Vote Down

Cancel
0 Matthew Yeend over 5 years ago in reply to QC

Hi Christian,

I managed to uninstall it some how.

Thanks for the help
Cancel
Vote Up 0 Vote Down

Cancel