recover tamper protection on Azure VMs

Out of interest, do you not have the password for some reason?

Is there a reason you can't disable TP from Central?

Is the password here:
https://cloud.sophos.com/manage/server/reports/deleted-devices/create

can you use sedcli.exe to take out the need for MCS/UI not functioning?

Regards,

Jak

Hi Jak,

Thanks for response.

What we are facing here is servers disconnected from dashboard which makes the Tamper Protection Policy useless. At the same time Sophos components aren't properly installed and I am unable to use the password. This is different from deleted device situation. We see this from time to time across all customers and resolve it by booting into safe mode. In this case I am looking at an Azure server and cannot seem to find the KB for this I once saw some time ago (or perhaps this was in an email from support). I more or less know what to do however wanted to check with official documentation.

Can you expand on the sedcli.exe please? Can I use the tamper protection password via cmd?

Regards,

JT

Hello JT,

sedcli.exe should be in \Program Files\Sophos\Endpoint Defense\. it displays a short usage info when called with -h.

Christian

Hello JT,

sedcli.exe should be in \Program Files\Sophos\Endpoint Defense\. it displays a short usage info when called with -h.

Christian

Hello,

Does this KBA help in your scenario?

https://community.sophos.com/kb/en-us/127602

Regards,

Stephen

Hi Stephen,

Thanks for response.

This is the article I was looking for.

Regards,

JT

Hi Christian,

Thanks for response.

While this component is not present on the problematic Azure servers - I did get to look at it on my machine and it will most certainly come handy in future.

jak thanks also.

Regards,

JT