Remote uninstall?

Hello Max,

:smileytongue: Sophos doesn't assume that you'd ever want to uninstall their product :smileywink:

seriously - why do you think you'd need this feature?

Christian

Hi Christian,

For times where access to the end device is not available. We run Sophos as an MSP and find inability to do this a real pain, currently only way to automate it is via AD Group policies or having another RMM style agent on there which will kick off a script. Both of these are not always available.

Hello Max,

where access to the end device is not available

you mean (administrative) access like RDP? Is it to correct a problem or to remove the product at license expiration (or something like this)? Dunno though which kind of support is available to MSPs so you might want to contact Support directly.

Christian

Christian,

computer can become unavailable for a range of reasons, sometimes clients move on and structured deinstallation sometimes is not possible so their PCs are still in our console and we still get charged for those licenses.

Sounds like you've not come across a way to achieve this or know if its on the road map?

Just seems the lifecycle of the install > deinstall has been half thought through.

Cheers,

Max

Hello Max,

Sounds like ...

I'm not Sophos and not even a MSP, partner, reseller or whatever.

their PCs are still in our console

Now, according to the docs an MSP usually builds a deployment package and installs it by using an RMM. Are you talking about SEC(onsole) or the RMM console? Uninstall wouldn't make a computer disappear from the former (SEC), at best it would be listed as unmanaged (which doesn't mean that Sophos isn't installed). SESC's/SEC's agent isn't an independent software management agent but an integral part of SESC. It doesn't install the endpoint software - and it doesn't uninstall.

If some RMM is used to install (and monitor the use of) the endpoint software then the same RMM can be used for (scripted) uninstallation. If structured deinstallation sometimes is not possible what do you want? Maybe my imagination is failing me, all I can think of in this situation is kinda self-destruct which can be triggered by SEC. But how would a self-destruct report success or failure? Don't think something like this could easily be screwed onto the existing infrastructure.         

we still get charged for those licenses

As said, you should better discuss this with Sophos directly - what exactly the situation is and which actions are required from your side (this bears some  resemblance to the update-over-HTTPs thead).

Christian