Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Upgrading Safeguard 5.6 Clients to 6.0

Dear all,

I have been tasked with looking into viable options for upgrading clients currently installed with Sophos Safeguard 5.6 to the new version 6.0. Up until now we have installed all of our clients manually but I am also researching the best way of pusing the installs onto the machines using WMI/GPO. I have a couple of questions that I am hoping someone will be able to answer:-

  1. If I configure and test (successfully) a new client installation using GPO, will Safeguard upgrade a client currently installed with version 5.6 to 6.0 using the same GPO?
  2. What parts of the installation need to be run on machines requiring the upgrade (i.e. pre-config, client, post-config)?
  3. Is there a way of automatically adding the user that logs into the machine after the GPO push as owner?

I know my questions are all different angles/areas but hopefully I can get some or all of the answer and I appreciate any help anyone can offer.

Kind Regards,

Daniel Bowman-Le Beau

Spelthorne Borough Council.

:23235


This thread was automatically locked due to age.
  • I'm pretty sure your answer to #2 is in the Installation Guide for 6.0.  I think you'll find the answer to #1 that way too.

    As for #3, if after the install there is no owner the next person who logs in becomes the owner (at least this is how it works in my environment).

    :23323
  • Daniel,

    Is this an enterprise or easy deployment?  And which components (Device Encryption, Data Exchange, Configuration Protection) are you using?

    I only have experience with SafeGuard Enterprise, but from what I understand, if you're only using DE or using DE/DX, then the upgrade should be straightforward, as long as you can get the GPO installation to install the components in the proper order (pre-install -> client -> client config).  I was told at one point in the past that you don't need to upgrade the pre-install or client-config, so if you create a software installation group policy for each and made sure that they installed in the correct order, you could upgrade just the client in the future.

    But, if you're using CP like we are, the upgrade process is much more complicated. I'm not sure if it's changed between 5.6 and 6.0, but in the past, you had to completely uninstall the CP client before you could upgrade.  So, the upgrade process would be:

    1) upgrade the SGN Client

    2) Uninstall the old version of the CP client

    3) install new version of CP client

    This would make it quite a bit more complicated to run the upgrade through a GPO.

    As for adding users, again, if you're using the Enterprise version, in the Specific Machine Settings policy, there is an item labelled "Import of new users allowed for".  We usually set it to "nobody" on our domain, which means that we have to assign users to computers in the SGN Management Center, but if you set this to "Owner", then the first person who logs into the machine will become the "owner", and they will be added to the POA.

    :23761
  • When upgrading the clients you don't need to remove the old software, it upgrades in place for windows DE/DX installs and SOPHOS maintains some good backwards/forwards compatability between old servers and new clients or visa versa depending on the versions.  I was running SG5.6 and was able to upgrade to SG6 without isses or removing anything.

    :24201
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?