The following steps should be carried out to uninstall Enterprise Console and the client software when installed on the same computer.
Applies to the following Sophos product(s) and version(s)
Enterprise Console 5.1.0
Enterprise Console 5.0.0
What To Do
If you have both Enterprise Console and the managed endpoint software on the same computer, you must uninstall the endpoint software before uninstalling the management software. Follow the steps below to ensure a clean removal.
- It is highly recommended that you close down any open applications on the computer before proceeding.
- Ensure that AutoUpdate is not in the process of updating. Evidence of an update taking place is the process Alupdate.exe being visible in the Processes list in Task Manager.
Note: If UAC is enabled, you will have to click on "Show processes from all users" in Task Manager to see Alupdate.exe as it runs under the SYSTEM context.
- To prevent AutoUpdate starting an update during the uninstall of components, it is recommended you stop the service, "Sophos AutoUpdate Service" from Windows services Start | Run | type:
services.msc | Press Enter) before starting the uninstall.
From 'Add or Remove Programs' or 'Program and Features' (accessed via 'Control Panel'), uninstall the Sophos components in the order set out below. For any components not listed, skip to the next component. Typically reboot requests from uninstalling Sophos Anti-Virus and Sophos Client Firewall can be deferred until the end of this section:
- Sophos Patch Agent
- Sophos Client Firewall
- Sophos Anti-Virus
- Sophos Remote Management System
- Sophos AutoUpdate
- Sophos Management Console
- Sophos Management Database *
- Sophos Management Server
- Sophos Update Manager
* Uninstalling the Sophos Management Database component will not remove the databases attached to SQL Server instance. For a list of databases associated with each console version see article: 17323. If you are planning to leave the SQL Server instance the databases will remain attached.
A default installation of Enterprise Console also installed a version of SQL Express with a 'Sophos' named SQL instance. If this is not in use by other applications and you do not intend on re-installing Sophos Enterprise Console on this machine this can also be safely uninstalled. To do so the following components can be removed. Uninstall 'Microsoft SQL Server 2008' will typically uninstall many of those listed below.
- Microsoft SQL Server 2008
- Microsoft SQL Server 2008 Native Client
- Microsoft Visual C++ 2005 Redistributable
- Microsoft SQL Server 2008 Browser
- Microsoft SQL Server 2008 VSS Writer
- Microsoft SQL Server 2008 Setup Support Files
Note: Uninstalling SQL Server will not remove the database and log files. For a default installation these can typically be found under the location: 'C:\Program Files\Microsoft SQL Server\MSSQL10.SOPHOS\MSSQL\'. If you are going to perform a fresh installation which will include re-installing Microsoft SQL Server, you should move any existing Sophos database files e.g. SOPHOS51.mdf, SOPHOS51_log.ldf so they do not conflict with the subsequent installation.
Once all the above are removed it is highly recommended that a restart of the computer is performed.
Once the computer is restarted you may optionally wish to perform the following additional steps:
- Un-share the following Windows shares:
- Running 'net share' in a command prompt will help you locate the locations of the directories shared out.
- Un-sharing the 'SophosUpdate' share will result in any client computer updating from this location displaying a warning the next time they check for updates outside of their grace period.
- Delete the following directories if they exist:
- C:\Program Files\Sophos\
- C:\Program Files(x86)\Sophos\
- C:\Documents and Settings\All Users\Application Data\Sophos\
Note: With Enterprise Console 5.x you were required to specify a Windows 'database' account and an additional account to be used by Sophos Update Manager. Please be aware that they are not created automatically at the installation and therefore will not be removed. For more information on these accounts and help identifying them see article: 113954.