Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 3 subscribers
  • Views 12220 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Removing specific "modules/addons" from endpoints in the management console

GeoffTerry

Hello,

We are in the process of starting a migration from Enterprise Console to Sophos Central and as I'm working through the documentation on what to do and what to expect I see that some features aren't compatible with the migration tool. Specifically in my environment we have about half of the computers with Firewall and Patch Assessment. I'm curious if there is any way to automate removing specific modules that aren't compatible with EC, either through the console itself or through scripting. I know when I attempt to manually remove these items it requires that I disable tamper protection so I'm unsure if theres a way to automate that as well. Really I just want to avoid having to go to 100 some computers to turn off tamper protection and remove these modules. 

Hoping someone has had some experience in something similar. 

Thanks,

Geoff



This thread was automatically locked due to age.
  • +1

    Hello Geoff,

    uninstall is simple and can be scripted. You could work around basic TP but I don't recommend it, Endpoint Defense/Enhanced Tamper Protection can only be turned off with the policy anyway.
    AFAIK Protect Computers without the additional components selected will also uninstall them.

    Almost forgot: It's perhpas a good idea to ask in the Central forum - whoever has already migrated probably doesn't watch the SEC group and from your subject it's not obvious that it's related to Central and migration [:)]

    Christian

  • 0 in reply to QC

    Christian,

    First off thanks for the reply, it looks like this is going to help a lot. One question I had is, near the end of the article it talks about the order you uninstall the components in. It gave a list of 1 through 10. Do you know if you can skip a component if you don't want it uninstalled? For example I just want to uninstall #1 and #5, are you aware if I can uninstall those in that order? Or do I also need to remove #2, #3 and #4?

    Also, I'll check out the central forum and see if it will help as well.

    Thanks,

    Geoff

  • +1 in reply to GeoffTerry

    Hello Geoff,

    the order
    is the safest way for a complete uninstall. If you look closely there's 7. RMS and 8. MCS - now you can't have both at the same time on an endpoint, can you?
    Most important is that you stop the AutoUpdate service before you start to uninstall and that AutoUpdate ist the last of the ones that are uninstalled with msiexec (the reason is that if the cached .msi that should be in \Windows\Installer\ is unavailable msiexec "falls back" to the InstallSource which is in AutoUpdate's cache - and if you uninstall AU first this cache is obviously gone for good).
    Otherwise there aren't "altitude" dependencies, i.e. you can uninstall SCF (#5) without uninstalling #2-#4 (Patch is anyway the first on the list and you likely don't have NAC).

    Christian

  • 0 in reply to QC

    Christian, 

    Perfect this will be exactly what I need to get ready to migrate everything to central.

    I appreciate it!

    Thanks,

    Geoff

  • 0 in reply to GeoffTerry

    Dear All.

    i want to uninstall sophos endpoint security on my windows 7 machine .when i m trying to uninstall.it is asking for that u  have to disable  it ., on the sophos endpoint security window there is no such option where i can disable it .

     

     

    kindly help

Unfiltered HTML