Sophos endpoint reinstall remotely

Hi Sophos User1878 

Unfortunately, it is not possible to re-install the from Sophos central, however please check this article to uninstall using a batch file, and then you can install the same by pushing the client via SCCM. 

You can also use the Sophos ZAP tool to completely uninstall. 

Hi Sophos User1878 

Unfortunately, it is not possible to re-install the from Sophos central, however please check this article to uninstall using a batch file, and then you can install the same by pushing the client via SCCM. 

You can also use the Sophos ZAP tool to completely uninstall. 

Is there a way to bulk turn off tamper protection? 

Hi Sophos User1878 

If you want to disable for all endpoints you can click on Global settings> General> Tamper protection. Please check this article for more information. 

You can also use Sophos Central APIs to enable/disable Tamper Protection for a list of endpoints.

For a scenario like this, personally I would try identifying the cause of the issue and find steps to resolve it as this may be more easily scaled.  If this proves too challenging or time consuming I would fall back to the uninstall/reinstall for a clean slate fix.  What is the error that you see on the endpoints?  Is there any fail or error messages in C:\ProgramData\Sophos\AutoUpdate\logs\SophosUpdate.log?  If it references a failed product install/uninstall, is there any fail, error, or "return value 3"s in that log file located in C:\Windows\Temp\?