Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Group Policy install of Sophos Central

Hi All, So i've been installing central for a few months using the documented installation method for GPO. And its been working fine. However my  last two deployments have been really problematic. The first time I ended up discussing with support and had to uninstall and re-install from the installer and it wall all fine. I assumed it would be a one-off but now its happened again.

 

It seems to partially install, if I look in add-remove I see only "Sophos Endpoint Agent"

 

Central reports is like this...

 

I see this in tasks...

 

and this is my script which is basically that from Sophos ...

 

@echo off
SET MCS_ENDPOINT=Sophos\Management Communications System\Endpoint\McsClient.exe
IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG
IF NOT EXIST "%ProgramFiles(x86)%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:X86_PROG
IF NOT EXIST "%ProgramFiles%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:INSTALL
pushd \\********\SophosCentral
SophosSetup.exe --quiet
Popd

 

Any ideas what might be hapening here?

 

Thanks



This thread was automatically locked due to age.
Parents
  • Just to add, I need to move this particular machine out, so i disabled tamper protection and uninstalled the endpoint agent. Ran the installer manually and its fine.

  • RE: "if I look in add-remove I see only "Sophos Endpoint Agent""

    This is expected, Sophos installs a number of components, some MSI based, others are custom installers but in all cases, they are marked as system components so they don't show up in Programs and Features.  

    For example, as part of the Sophos Central endpoint I have SAV 10.8.6 installed, SAV is a MSI based component and the uninstall key for this 32-bit package is:
    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BEEB46C0-1983-4DF2-AD40-8C464842DF24}

    under this key is the SystemComponent DWORD set to 1.

    Only the "Sophos Endpoint Agent" component:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos Endpoint Agent

    Does not have the SystemComponent value set to 1 so this component does appear in Programs and Features as this is the "unified" uninstaller.

    Having 13 entries in Programs and Features for each Sophos component would be odd plus the unified uninstaller knows the best order to remove the components.

    Jak

Reply
  • RE: "if I look in add-remove I see only "Sophos Endpoint Agent""

    This is expected, Sophos installs a number of components, some MSI based, others are custom installers but in all cases, they are marked as system components so they don't show up in Programs and Features.  

    For example, as part of the Sophos Central endpoint I have SAV 10.8.6 installed, SAV is a MSI based component and the uninstall key for this 32-bit package is:
    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BEEB46C0-1983-4DF2-AD40-8C464842DF24}

    under this key is the SystemComponent DWORD set to 1.

    Only the "Sophos Endpoint Agent" component:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos Endpoint Agent

    Does not have the SystemComponent value set to 1 so this component does appear in Programs and Features as this is the "unified" uninstaller.

    Having 13 entries in Programs and Features for each Sophos component would be odd plus the unified uninstaller knows the best order to remove the components.

    Jak

Children