Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 0 subscribers
  • Views 7185 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos keeps getting pushed to machine after it is uninstalled.

AdrecDeRue

Sophos Anti-Virus, Sophos AutoUpdate, and Sophos Update Manager continue to get pushed to device. The device has had them all uninstalled using the recommended method of the Add or Remove programs function and it is being deleted from the SEC. The device is being used to test and alternative AV and when Sophos is getting pushed to it, it is causing a ghost issue to arise on the device and we are flagged. As recommended, we installed those programs and then restarted the device, it shows up as red and X'd out in the SEC and then we delete it. However, it gets added again and goes green with Sophos reinstalled. This is the only machine we have had this problem with out of over 1000 machines. Any thoughts on how I can get Sophos to stop getting pushed and reinstalled to this device?



This thread was automatically locked due to age.
Parents
  • 0

    Hello AdrecDeRue,

    first of all, I don't think that Sophos Update Manager was installed - perhaps you meant Remote Management System?

    Sophos is getting pushed to it
    I daresay it isn't. Not even AD sync with automatic protection would attempt an install to a previously protected endpoint, and there's no other mechanism in SEC which would automatically let alone repeatedly install the Endpoint software (furthermore it would not consider a deleted computer). It looks like Sophos is installed by some other means (e.g. a startup script) - subsequently the endpoint contacts SEC which causes the computer to reappear.

    Christian

Reply
  • 0

    Hello AdrecDeRue,

    first of all, I don't think that Sophos Update Manager was installed - perhaps you meant Remote Management System?

    Sophos is getting pushed to it
    I daresay it isn't. Not even AD sync with automatic protection would attempt an install to a previously protected endpoint, and there's no other mechanism in SEC which would automatically let alone repeatedly install the Endpoint software (furthermore it would not consider a deleted computer). It looks like Sophos is installed by some other means (e.g. a startup script) - subsequently the endpoint contacts SEC which causes the computer to reappear.

    Christian

Children
No Data
Unfiltered HTML