This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

sophos mac installer

how do I customize or do a scripted install with the mac installer? When i install sophos on a mac, it asks for the update share. Can I put this into a scripted installed?

:47225


This thread was automatically locked due to age.
  • Hello tdubb,

    you didn't say whether theses are managed or stand-alone installs. Anyway, Bob Cook's post refers to two relevant articles. 

    Christian

    :47243
  • Bob Cooks suggested KB articles don't specify if you can create a managed client that will point to your "company web server" update location. The first link allows you to specify primary and secondary update locations with or without credentials by using a small tool with the sophos anti-virus for mac installer you get from mysophos. The second link (I think) shows you how to use your sophos anti-virus.mpkg from your cid location to create an xml file that puts your client in a specific group. Ok that's cool, I guess if I put it in a specific group it could theoretically get an update policy pointing to my update location but I don't care about specifying specific groups. I have alot of groups in my environment, I want ONE managed agent with an update location pointing to my cid and being dumped into the unassigned group after install. Then ill move those host into their respective groups..
    :47277
  • Hello test12234,

    well, it has been argued (in the referred thread and in Custom Standalone Mac Installer) that there are deficiencies for both managed and unmanaged packages.

    Then I'll move those host into their respective groups

    What about creating a "landing group" (e.g. _PreAssigned_ so that it is shown right below Unassigned) with the appropriate updating policy to catch the newly installed Macs? As they'll connect to the management server after install and appear in a managed group instead of Unassigned they'll immediately get a set of initial policies?

    Christian

    :47293
  • Hello test12234,

    the GroupPath doesn't (seem to) work?

    SecServerName is the NetBIOS name - guess any name the server recognizes as one of its own would work but I haven't tested it. Note that the path is caSe SenSitIVe and must not end in a backslash (please see the Example in How to automatically assign ...).

    Christian

    :47529