Sophos Endpoint Security and Control: tamper protection in Symantec and McAfee products must be disabled before attempting removal
Issue
When using the 'Protect computers' wizard with 'Remove third-party software' selected in Enterprise Console, version 3.1 and above, the message 'Cancelled Sophos installation because existing third party security software could not be uninstalled' is displayed in Enterprise Console.
Removal of third-party software and the installation of Sophos products fails.
Note: this error message will also appear if you have run the Sophos installer directly from your Central Installation Directory (CID).
Sophos product and version
Sophos Endpoint Security and Control, version 8.0 and above
Sophos Enterprise Console, version 3.1 and above
Operating system
Windows 2000+
What to do
Disable tamper protection on your affected computers and then use the 'Protect computers' wizard again.
To disable tamper protection in Symantec:
- Open Symantec AntiVirus on the computer.
- On the 'Configure' menu, select Tamper Protection.
- Remove the check mark from the 'Enable Tamper Protection' check box.
To disable tamper protection in McAfee:
Contact McAfee technical support.
Technical Information
Tamper protection actively monitors the files and services installed by the third-party security software and prevents them from being removed, edited or shut down. If tamper protection is enabled on any of your computers when you use the 'Protect computers' wizard, the wizard will fail.
If you need more information or guidance, then please contact technical support.
- Article ID: 35340
- Created: 29 Feb 2008
- Last updated: 21 Apr 2008
