You may have come across an issue where you have deleted a Server or workstation from Sophos Central not realising that by default these devices are protected for “Tamper Protection”.
- Sophos Kba 119175 Security
- How To Disable Tamper Protection
- Sophos Kba 119175 Error
- Sophos Uninstall Tamper Protection
- Sophos Kba 14377
- Sophos Remove Tamper Protection Regedit
So now on the local machine you are attempting to uninstall “Sophos” but you can’t and keep getting an error “You must disable “Sophos Tamper Protection before you continue. Contact your administrator or see Sophos KBA119175”.
Additionally, please run through the steps below on the affected machines to exclude the Dashlane ports from the Sophos Web Filter: To allow the editing of the registry, disable first the tamper protection on the endpoint by following KBA 119175. Click the keys Windows + R. Type regedit then click OK. I cannot uninstall Sophos Endpoint Security and Control from my computer! 2 years ago I downloaded the program through my university. About a year ago they stopped having a centralized, organization-subscription in favor of students downloading Sophos Home for free. Sophos always encourages customers to use the latest operating systems and service packs; however, we also recognize that some customers are unable to upgrade for various reasons, and because of this, Sophos is offering to extend the availability of support for Windows 7, Windows Server 2008 R2, and Windows SBS 2011 from their current. Apr 03, 2017 Contact your administrator or see Sophos KBA119175”. Contacting Sophos doesn’t help as they claim there is no way around this. From the looks of it you can’t remove the application and potentially you may have to re-build it if you really need to remove the software.
Contacting Sophos doesn’t help as they claim there is no way around this. From the looks of it you can’t remove the application and potentially you may have to re-build it if you really need to remove the software.
In the below steps I will show you how you can reset the password for “Tamper Protection” and disable it. You can then uninstall the software.
1. On the local machine launch “Services” and “Stop” the “Sophos Ant-Virus” service
2. Open a explorer window and navigate to “C:ProgramDataSophosSophos Anti-VirusConfig” right click the filename “machine.xml” and click “Edit” alternatively open with “Notepad” – make sure you make a copy of the file before editing it as a backup should you need to restore it.
3. Click “Edit-Find…” find the line within the file called “<TamperProtectionManagement><settings>”
4. On the line below – highlight the hashed password and remove it out.
5. Paste in the following Hash. “E8F97FBA9104D1EA5047948E6DFB67FACD9F5B73” This will set the password to “password”
6. Save the changes
7. Start the “Sophos Anti-Virus” service
8. Launch the Sophos Console and click “Authenticate User”
9. Insert the password “password”
10. Click “Configure tamper protection”
11. uncheck the box “Enable Tamper protection” and click “OK”
12. Now run the the uninstallation process again and the software should uninstall.
I actually spoke to Sophos about this about a year ago. We had a terminal server that someone had installed it on, and had not recorded the 'Tamper Password'. It was a little much for a server that I was about to retire, but it might help you.
Here is what they sent me:
*************************************************************
In order to remove tamper protectionand uninstall is as follows
Sophos Kba 119175 Security
Please try these steps
-----------------------------------------
Article ID: 119175
Title: Sophos Endpoint: How to disable TamperProtection
URL: https://sophos.com/kb/119175
-----------------------------------------
In case Tamper protection was notdisabled and cannot communicate with endpoint anymore.
-----------------------------------------
Article ID: 124377
Title: Sophos Endpoint Defense: How to recovera tamper protected system
URL: https://sophos.com/kb/124377
-----------------------------------------
Uninstall
-----------------------------------------
Article ID: 118849
How To Disable Tamper Protection
Title: How to uninstall different Sophosproducts
Sophos Kba 119175 Error
URL: https://sophos.com/kb/118849
Sophos Uninstall Tamper Protection
Sophos Kba 14377
Sophos Remove Tamper Protection Regedit
*****************************************************************