Anti-Virus Upgrades (Autumn 2022)
Introduction
ICT have changed AV supplier to Microsoft Defender 365, in common with many universities. Sophos must be removed from all Imperial PCs and Macs by the end of October 2022.
The Procedure (overview)
- Uninstall Sophos from your PC.
- Reboot PC (essential).
- Install Defender 365 (no reboot needed).
The Procedure (Windows specifics)
Firstly, uninstall Sophos. There are two ways in which you can do this, so the choice is yours:
- New way (using Windows Settings app)
- From your start menu click on the Settings cog.
- Open Apps -> Apps & Features.
- Scroll down the list until you see Sophos Endpoint Agent. Click on "hamburger" menu on the right and select Uninstall.
- Reboot when prompted. This step is essential before you move on to install Defender.
- Old way (using Control Panel)
- From your start menu open Control Panel.
- Open Programs and Features.
- Scroll down the list until you see Sophos Endpoint Agent. Click on it and press the Uninstall button at the top.
- Reboot when prompted. This step is essential before you move on to install Defender.
Once you're back into Windows after the reboot, you need to download my Defender installer file to your PC's local C: drive (not a network drive).
I've left this on the T: drive in the T:\IT\Antivirus\Defender365 folder if you're accessing from a PC on site. Don't run it yet, just copy it to the PC we're installing to. Alternatively, if you're off-site you may download it from Sharepoint here.
Once downloaded, right click on it and select Run as administrator.
You may get Windows Defender (not Defender 365) blocking this installation, as you're trying to run a script you downloaded from the Internet, as admin. Normally a bad idea!
In this case press "More Info" and allow the installation.
It will make some checks and then prompt you to press Y to install. Do so.
If all goes well you'll see the below message.
You may now check the status of your installation if required by visiting https://security.microsoft.com and logging in with your Imperial Office365 account. Note that there will likely be no entries until after you've had a security alert.
Mac-Specific notes
Awaiting ICT instruction. Check back later.