Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 11 subscribers
  • Views 3340 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Group Policy install of Sophos Central

ITTim

Hi All, So i've been installing central for a few months using the documented installation method for GPO. And its been working fine. However my  last two deployments have been really problematic. The first time I ended up discussing with support and had to uninstall and re-install from the installer and it wall all fine. I assumed it would be a one-off but now its happened again.

 

It seems to partially install, if I look in add-remove I see only "Sophos Endpoint Agent"

 

Central reports is like this...

 

I see this in tasks...

 

and this is my script which is basically that from Sophos ...

 

@echo off
SET MCS_ENDPOINT=Sophos\Management Communications System\Endpoint\McsClient.exe
IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG
IF NOT EXIST "%ProgramFiles(x86)%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:X86_PROG
IF NOT EXIST "%ProgramFiles%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:INSTALL
pushd \\********\SophosCentral
SophosSetup.exe --quiet
Popd

 

Any ideas what might be hapening here?

 

Thanks



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to ITTim

    RE: "if I look in add-remove I see only "Sophos Endpoint Agent""

    This is expected, Sophos installs a number of components, some MSI based, others are custom installers but in all cases, they are marked as system components so they don't show up in Programs and Features.  

    For example, as part of the Sophos Central endpoint I have SAV 10.8.6 installed, SAV is a MSI based component and the uninstall key for this 32-bit package is:
    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BEEB46C0-1983-4DF2-AD40-8C464842DF24}

    under this key is the SystemComponent DWORD set to 1.

    Only the "Sophos Endpoint Agent" component:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos Endpoint Agent

    Does not have the SystemComponent value set to 1 so this component does appear in Programs and Features as this is the "unified" uninstaller.

    Having 13 entries in Programs and Features for each Sophos component would be odd plus the unified uninstaller knows the best order to remove the components.

    Jak

  • 0 in reply to jak

    Thanks Jak, thats a good explanation thank you, I still however don't understand why my GPO deployment is no longer working correctly?

  • 0 in reply to ITTim

    Do you have the install logs from the affected machine? What happens if you copy the installer to local and execute there from command line? Does it install properly.

    In essence, the GPO script has the machine call the installer and it runs in the local context. So, if the local run of the installer works then we are getting into permission issues with the share and the account calling the installer. If the local install doesn't work - then we need to look at what elements on the machine would prevent actions.

    RichardP

    Program Manager, Support Readiness | CISSP | Sophos Technical Support
    Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • 0 in reply to RichardP

    Thanks for the reply Richard, I don't have logs to hand at the moment, however I'm hoping to visit the office this week so I can have a look into it.

Unfiltered HTML