Disclaimer: This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment.
Hi Community,
After following the steps mentioned in Alerts for missing or stopped services for Windows endpoints article for services not running issue, if you are still seeing the error then below steps can be performed on the endpoint to resolve the issue.
- Disable tamper protection on the endpoint via Sophos Central Dashboard.
- On the Endpoint, open Sophos shield from Notification bar on the desktop of Sophos, and enter the Admin Password.
- Click on settings and check the column to override policy then turn off tamper protection option at the bottom
- Open services.msc to view all services running [Windows-Start-Run-services.msc]
- Stop Sophos Auto-update service
- Rename the following folders:
a) Go toC:\ProgramData\Sophos\AutoUpdate\datab) Rename the "warehouse" folder to "warehouse.old"
c) Go toC:\ProgramData\Sophos\AutoUpdate.
d) Rename the "cache" folder to "cache.old" - Rename the file named "SophosUpdateStatus.xml" at the location
C:\ProgramData\Sophos\AutoUpdate\data\status - Restart Sophos Auto-update service
- Push the Update again from Sophos GUI [Click on “About” at the bottom screen of Sophos UI and click “Update Now”]
a) Wait for the update to complete
- Reboot the computer.
Have an idea or suggestion regarding our Documentation, Knowledgebase, or Videos? Please visit our User Assistance forum on the Community to share your idea!
Updated disclaimer
[edited by: Qoosh at 10:06 PM (GMT -7) on 31 Mar 2023]