I do a automatically install siphos when macihnes show up in an OU. But when some achines are reimaged, they get back in the ou but sophos do not push it out to the reimaged machine
any idea?
This thread was automatically locked due to age.
I do a automatically install siphos when macihnes show up in an OU. But when some achines are reimaged, they get back in the ou but sophos do not push it out to the reimaged machine
any idea?
Hello tdubb,
automatic protection is attempted only once for a given endpoint. SEC has no way to know that you have reimaged it. If you remove a computer from an OU it is just moved to the Unassigned group but keeps the protection attempted flag. Even if you delete it from the console (which is essentially a hide) its record remains in the database. Upon re-appearance in the OU the entry is undeleted (unhidden) but the flag is not cleared and thus no attempt to protect it is made.
Deleting the computer from the database (which is not a supported scenario though) would enable automatic protection but also remove the machine's history and associated events. Please see the thread Does sophos on domain detect reimaged machines and trigger a reinstall? for more information.
Christian
Hello tdubb,
automatic protection is attempted only once for a given endpoint. SEC has no way to know that you have reimaged it. If you remove a computer from an OU it is just moved to the Unassigned group but keeps the protection attempted flag. Even if you delete it from the console (which is essentially a hide) its record remains in the database. Upon re-appearance in the OU the entry is undeleted (unhidden) but the flag is not cleared and thus no attempt to protect it is made.
Deleting the computer from the database (which is not a supported scenario though) would enable automatic protection but also remove the machine's history and associated events. Please see the thread Does sophos on domain detect reimaged machines and trigger a reinstall? for more information.
Christian