Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 3 subscribers
  • Views 7451 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

a solution to sophos endpoint tamper problem when unable to uninstall/repair

Linus Klang

I Work at a business with 30-50 devices.
We get frequent email allerts about device out of date, even when the update is just a few seconds old.
Another problem is that i´ts not possible to disable Tamper to reinstall, if the updater fails. (pretty common) With this problem another problem occours, you cannot uninstall or reinstall due to tamper.
A third problem is just trying to uninstall sophos endpoint, it´s not possible because Antivirus.msi is missing. (common when updater fails)
photos.app.goo.gl/Y9HULJUqAwZOs9pd2


The solution to all of the above is to run:
support.microsoft.com/.../fix-problems-that-block-programs-from-being-installed-or-removed
In 6 out of 6 cases it´s enough to uninstall Sophos Anti-Virus with this software (as local admin) then reinstall.
After the reinstall it´s possible to uninstall sophos completely if necessary 


My personal toughs is that sophos update procedure is to first delete the files that are being updated, and if the update fails, the updater cannot find the MSI file and the whole setup is partially corrupted.



This thread was automatically locked due to age.
  • 0

    Hello Linus Klang,

    apparently this is Sophos Central, IMO the Central forum would be the better place for this enquiry - especially as the Sophos Endpoint Agent is not (yet) part of ESC.

    it´s enough to uninstall Sophos Anti-Virus with this software
    it is a common misconception that this Fix-It (or its predecessor msicuu2.exe) performs an uninstall - it doesn't. It removes the Installer information associated with the product from the registry. It does not remove files and folders, uninstall services, or otherwise revert any actions executed as part of the install.

    frequent ... device out of date ... not possible to disable Tamper
    are definitely not normal and should be investigated as apparently a reinstall doesn't provide a permanent solution. There seems to be a communication issue.

    Also AutoUpdate does not delete first - try to update later. Neither that often updating fails nor that afterwards the .msi is missing is normal.

    Christian   

Unfiltered HTML