Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Subscribers 5 subscribers
  • Views 15680 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

how it could affect the Group Policy of W7 to install Sophos SafeGuard Client????

mlvid

Hello,

this is a complex question to test Sophos Engineers :smileywink:. I have to install Sophos SafeGuard Client on a Windows 7 with a lot of Windows Group Policy applied.

Which Group policy of Windows 7 affect in the installation?

Some effects of my group policy in the installation:

- I don´t see the Sophos Icon in the System tray (notification area).

- I miss some windows services:

   - SafeGuard (R) Log Service

   - SafeGuard(R) Transport Service

Thanks in advanced,

Dolores

:22049


This thread was automatically locked due to age.
  • 0

    Also I forgot that I got an error when I install Configuration protection of the SGNClient_x64.msi package with msxml4.dll

    :22055
  • 0

    Hi Dolores,

    at this point there is no information about any GPO conflicting with SGN in some way.

    Based on your description I would rather think that the SGNMaster Service and some other Services can't be registered in the system which has normally nothing to do with GPO but with Firewall or AV settings (blocking of unknown executables)

    If you can't find any ad-hoc info / solution in that section then please open a new support call with our help desk and provide an installation log and detailed information about your GPO setup (Gpresults?) of the machine =)

    Regards

    Dan

    :22407
  • 0

    After suffering the installation of Sophos SafeGuard on a computer on which you have published a Group Policy in Windows 7 I can say that GPOs conflict with SGN

    - To install Configuration protection of the SGNClient_x64.msi package with msxml4.dll you must NOT have enable the GPO: Computer Configuration, Administrative Templates, Windows Components, Application Compatibility, Turn off Program Compatibility Assistant .

    - With a GPO you can disable windows services. It can NOT be disable scardserv service.

    :womanfrustrated:

    :23199
  • 0

    Hi Dolores,

    thank you very much for sharing your findings - I will retest this on my system and give you some feedback if you have found a general issue or if this is a single occurence (maybe depending on some other system settings you have)

    Regards

    Dan

    :23215
  • 0

    Thanks Dan.

    For me is more important now to solve: /search?q= 23197

    Thanks in advanced

    :23223
  • 0

    Hi Dolores,

    I have applied your settings to one of my machines. I applied this using the local policy editor (set policy to enabled)

    - To install Configuration protection of the SGNClient_x64.msi package with msxml4.dll you must NOT have enable the GPO: Computer Configuration, Administrative Templates, Windows Components, Application Compatibility, Turn off Program Compatibility Assistant .

    Using SGN 6 I was not able to reproduce any installation issues. I would recommend that you test the latest version of SGN as well.

    Regards

    Dan

    :23229
  • 0

    During the installation of SGN_Client_x64.msi your product internally registers the library msxml4.dll

    If you have enabled Computer Configuration, Administrative Templates, Windows Components, Application Compatibility, Turn off Program Compatibility Assistant then is NOT possible that you can register msxml4.dll

    The installation of the products shows the error.

    I don't know if your version 6 still registers internally the library msxml4.dll , but if it does it  can't finish the installation without any error.

    :23301
  • 0

    Hi Dolores,

    just to give you an update I was finally able to reproduce this one (I was missing out a reboot after changing the local policy). The issue is now being analyzed by DEV.

    Unfortunately there is no timeline for an update but thank you very much for bringing this one up. If you encounter this to be a problem in your organization please raise a support call to get more frequent updates on the progress being made here.

    Regards

    Dan

    :23435
Unfiltered HTML