The correct way to uninstall Sophos Endpoint Security and Control from a Windows workstation.
Move the workstation out of the Sophos synchronized AD OU into a non synched AD OU.
Reboot the workstation.
Delete the workstation from the Sophos Enterprise Console.
The Sophos Endpoint Anti-tamper protection must be disabled before you
can remove Sophos anti-virus. You need a password for this.
Log in to the computer with a Sophos Administrator account. The administrator account may be your normal Windows account if you maintain your own computer.
Make sure that an update is not currently being performed. You can check this by right-clicking the Sophos shield in the system tray of the taskbar and ensuring 'View updating status' is grayed out and cannot be selected. If an update is currently in progress wait for it to complete before continuing.
Open Windows services (Start | Run | Type: services.msc | Press return), right-click on the 'Sophos AutoUpdate Service' and select 'Stop'1.
Open the Add/Remove Programs (or Programs and Features) window (Start | Run | Type: appwiz.cpl | Press return). You can also access the Windows 'Run' box by press Windows+R on your keyboard.
Using the list below remove the Sophos components installed on your computer in the order shown. If you cannot find one or more components listed below it may not be installed and you can move on to the next item. You do not have to restart the computer until you get to Step f.
Sophos Patch Agent
Sophos Compliance Agent (NAC)
Sophos Network Threat Protection
Sophos System Protection
Sophos Client Firewall (SCF)
Sophos Anti-Virus (SAV)
Sophos Remote Management System (RMS)
Sophos Management Communication System (MCS)
Sophos AutoUpdate (SAU)
Sophos SafeGuard components
Sophos Endpoint Defense
Restart the computer.
The information in this blog post is an edited version of a Sophos Knowledge Base article found here.