Replace Sophos with Windows Defender on Intune managed devices

Question

We are replacing Sophos Endpoint Protection with Windows Defender, and I'd like to ask if anybody has experience in doing so and is willing to share it.

a) removing Sophos from Windows 10 devices using Intune - is it possible and what should I take care of to prevent bricking the device (esp. BitLocker)?

b) deploying Windows Defender to Windows 10 devices to devices where I cannot uninstall Sophos remotely - is it possible / recommended?

bnderi · Answer

I wish someone could reply with a solution. We are also faced with the same predicament.

nathan blasac · Answer

Here is a community guide on a possible way to convert a simple batch script to powershellhttps://blog.inedo.com/powershell/convert-batchessentially you rename it to .cmd, then to .ps1. if you run it and it still works as expected the simple conversion has worked.after you've converted the file call it with the following command line:powershell.exe -ExecutionPolicy Byass -file .\script.ps1

bnderi · Answer

BNderi&nbsp;&nbsp;from this&nbsp;stack overflow question&nbsp;I was able to create a working .ps1 scriptInvoke-Expression "&amp; `"C:\Program Files\Sophos\Sophos Endpoint Agent\uninstallcli.exe`" MsiExec.exe /X{31616A98-3852-49E9-BDD6-77A1AB85571A} /quiet /norestart /L*v %windir%\Temp\Uninstall_SAV10_Log.txt"&nbsp;

nathan blasac · Answer

What are you currently doing with Sophos? (A/V? EDR? Disk Enryption?)Are the devices all Intune Enrolled yet?

bnderi · Answer

we are using Sophos for A/VAll our devices are Intune enrolled

Forum Discussion

Replace Sophos with Windows Defender on Intune managed devices

Share

Resources