Sophos Central Encryption removal best practices

Dear Team,

Kindly share the best practices to remove Sophos encryption before expired.



Added Tags
[edited by: Gladys at 3:11 PM (GMT -7) on 22 Aug 2023]
Parents Reply Children
  • Hi  ,

    In addition to what Glenn mentioned, we also suggest to first apply a policy that is set to turn off encryption on the Windows devices. Otherwise, the encryption will resume right away, basically after you try to decrypt the device.

    Once the policy is changed, then you can follow these steps to navigate through the device to remove the encryption:
    1. Sign in to your Windows device with an administrator account (you may have to sign out and back in to switch accounts).
    2. In the search box on the taskbar, type Manage Bitlocker and then select it from the list of results. Or you can select the Start button, and then under Windows System, select Control Panel. In Control Panel, select System and Security, and then under Bitlocker Drive Encryption, select Manage Bitlocker.
    3. If Bitlocker is turned on, select Turn off Bitlocker.

    After that, you can proceed and uninstall the components that are no longer needed.


    Gladys Reyes
    Global Community Support Engineer
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  Visit Sophos Techvids