This procedure documents the required steps to remove the Sophos AV endpoint from CG managed laptops and confirm Defender for Endpoint.:
Uninstalling Sophos:
Perform the following steps as described here:
On Windows:
Run the command - "C:\Program Files\Sophos\Sophos Endpoint Agent\SophosUninstall.exe" --quiet
OR
Remove Sophos through the Add/Remove Programs or Launchpad console.
On Mac:
Run the command - "sudo /Library/Application\ Support/Sophos/saas/Installer.app/Contents/MacOS/tools/InstallationDeployer --remove"
OR
Remove Sophos through the Add/Remove Programs or Launchpad console
Clean Up:
All corporate Windows computers are dynamically licensed for Defender for Endpoint, so no additional steps are necessary to assign a Defender license. Mac computers have Defender for Endpoint published through InTune. The technician must confirm the endpoint is running with updated definitions from Windows' or Mac's Virus and Threat Protection system console: