Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 8 subscribers
  • Views 2039 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

New windows domains - now all servers 'Some Sophos services are not running'

neckbeard

Hi All

 

We recently consolidated our 2 windows domains. Clients appear to be fine. However servers that have moved over are saying 'Some Sophos services are not running'.

Even though all services appear to be running fine under services. Reboots have no effect.

It wont let me uninstall/reinstall 'the msi had an issue' or similar vague message.

 

I cant see where it references the old domain/credentials in order to update/fix.

Any guidance welcomed. 



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi Andy

    Can you please do the following to check the status of endpoint 

    1) Click on About ( Right bottom corner on endpoint)

    2) Run the Diagnostic tool

    3) A second UI will open

    4) Make sure you have all the green check marks

     

    If there is one check-mark which is in yellow or red ( Click on it and see what's missing or not running and let us know here)

     

    If everything is good then perform the following steps 

     

    - Disable Tamper Protection (if enabled)
    - Stop the Sophos Health Service
    - Browse to the following folder:
     
    <C:\ProgramData\Sophos\Health\Event Store\Database>
     
    - Rename events.db to events.orig
    - Start the Sophos Health Service
    - Open Task Manager and end the Sophos UI.exe process
    - Launch a new Sophos UI.exe process from:
     
    <C:\Program Files\Sophos\Sophos UI.exe>
     
    Note: This will clear all existing data so should not be done as a general action. 
    ------------------------------------------------------------

     

Reply
  • FormerMember
    0 FormerMember

    Hi Andy

    Can you please do the following to check the status of endpoint 

    1) Click on About ( Right bottom corner on endpoint)

    2) Run the Diagnostic tool

    3) A second UI will open

    4) Make sure you have all the green check marks

     

    If there is one check-mark which is in yellow or red ( Click on it and see what's missing or not running and let us know here)

     

    If everything is good then perform the following steps 

     

    - Disable Tamper Protection (if enabled)
    - Stop the Sophos Health Service
    - Browse to the following folder:
     
    <C:\ProgramData\Sophos\Health\Event Store\Database>
     
    - Rename events.db to events.orig
    - Start the Sophos Health Service
    - Open Task Manager and end the Sophos UI.exe process
    - Launch a new Sophos UI.exe process from:
     
    <C:\Program Files\Sophos\Sophos UI.exe>
     
    Note: This will clear all existing data so should not be done as a general action. 
    ------------------------------------------------------------

     

Children
No Data
Unfiltered HTML