Hi Sophos Community,
I'm testing a remote uninstall of Endpoint 10.3 using a script as documented in article ID 109668 How to uninstall Sophos Endpoint Security and Control from the command line or with a batch file.
As the PC is an AD environment I created a new GPO and linked in batch file as a startup script. The script seemed to work successfully as all 3 components (RMS, AV, AutoUpdate) have been removed and the log files looked clean.
However, if I look in SEC (5.2.2) at the PC object it shows the red X icon over thecomputer and states same as policy, yes, active (policy compliance, up to date, on-access). So it seems like SEC sees the computer as still managed but just disconnected?
I would have assumed that after a successfull uninstall SEC would show just a plain grey icon
used for "Unmanaged computers".
Can anyone advise why this is happening? I was hoping to use the computers "status" in SEC as an indication as to which computers have successfully completed the uninstall.
This thread was automatically locked due to age.
