|
Size: 1371
Comment:
|
Size: 1592
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 17: | Line 17: |
| wmic product where "name='Symantec Endpoint Protection'" call uninstall /nointeractive<<BR>><<BR>> <<BR>><<BR>> \\aythya\Sources\Applications\Sophos\sophossetup.exe --quiet<<BR>><<BR>> |
{{{ wmic product where "name='Symantec Endpoint Protection'" call uninstall /nointeractive \\aythya\Sources\Applications\Sophos\sophossetup.exe --quiet }}} Notes on script: Sophos is configured with an anti-tamper password and cannot be directly uninstalled without the password or ICT procedure<<BR>><<BR>> To do: sanity checks, check registry keys before running each command<<BR>><<BR>> |
Sophos for WIndows
Project: Anti-Virus Replacement - ICT Unmanaged devices1
Description: ICT are removing Symantec products, to save on license costs. Sophos will be installed as the new antivirus protection. CSG must carry out this task on the WIN domain.
Progress: FIrst meeting on 23rd November 2020
Second meeting on 25th November 2020: ICT sent the Sophos installation files and Powershell scripts
Files uploaded to \\win\dfs\Admin\Sophos AV\DoC
nraghwan and rkhandke tested Sophos on Windows 10 VMs - successful
rkhandke tested on temp server motmot - unsuccessful, due to licensing. As domain member, sophos accounts appear to have been created in AD, and subsequently disabled by CLAM
rkhandke tested GPO startup scripts using WMI to query for existing Symantec and Sophos installations
To do: test automated deployment of the Sophos installer package
SophosSetup.exe --quiet
Successfully tested script on ladywood-vm1:t
wmic product where "name='Symantec Endpoint Protection'" call uninstall /nointeractive \\aythya\Sources\Applications\Sophos\sophossetup.exe --quiet
Notes on script: Sophos is configured with an anti-tamper password and cannot be directly uninstalled without the password or ICT procedure
To do: sanity checks, check registry keys before running each command
...