Sophos endpoint reinstall remotely

Hi Sophos User1878 

Unfortunately, it is not possible to re-install the from Sophos central, however please check this article to uninstall using a batch file, and then you can install the same by pushing the client via SCCM. 

You can also use the Sophos ZAP tool to completely uninstall. 

Is there a way to bulk turn off tamper protection? 

Hi Sophos User1878 

If you want to disable for all endpoints you can click on Global settings> General> Tamper protection. Please check this article for more information. 

You can also use Sophos Central APIs to enable/disable Tamper Protection for a list of endpoints.

For a scenario like this, personally I would try identifying the cause of the issue and find steps to resolve it as this may be more easily scaled.  If this proves too challenging or time consuming I would fall back to the uninstall/reinstall for a clean slate fix.  What is the error that you see on the endpoints?  Is there any fail or error messages in C:\ProgramData\Sophos\AutoUpdate\logs\SophosUpdate.log?  If it references a failed product install/uninstall, is there any fail, error, or "return value 3"s in that log file located in C:\Windows\Temp\?

You can also use Sophos Central APIs to enable/disable Tamper Protection for a list of endpoints.

For a scenario like this, personally I would try identifying the cause of the issue and find steps to resolve it as this may be more easily scaled.  If this proves too challenging or time consuming I would fall back to the uninstall/reinstall for a clean slate fix.  What is the error that you see on the endpoints?  Is there any fail or error messages in C:\ProgramData\Sophos\AutoUpdate\logs\SophosUpdate.log?  If it references a failed product install/uninstall, is there any fail, error, or "return value 3"s in that log file located in C:\Windows\Temp\?