Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 10160 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Protected computers still showing as greyed out in Enterprise console

SN

Hi

I'm having a problem where by computers i have protected through the enterprise console are not showing as protected even though the sophos client installed correctly and updates without problems.

Basically the same computers were protected and showed fine when installed with win XP.  I have recently upgraded all the desktops to Win 7 and protected them from console but they do not show as protected. 

On some of the computers i had to manually run the sophos install from task scheduler.  The machines have the same SID from when they had XP installed and Sophos is gathering information from AD.  Server is domain controller running win 2k8 R2 SP 1 and enterprise console 4.5.

I would really appreciate some help on this.   Thanks

:12209


This thread was automatically locked due to age.
Parents
  • 0

    Hi Jak, thank you for the detailed reply.

    8. On the client start the Sophos Message Router Service.
    Within a couple of seconds you should see the pkc and pkp value return under:
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Mes

    saging System\Router\Private

    The above entry in the registry does not exist nor does it create when i start the sophos client services.  I have set up a group policy allowing traffic TCP 8192-8194 as per http://www.sophos.com/support/knowledgebase/article/111180.html

    I also disabled the win firewall on the client machine and this still did not create any entry in the registry for pkc and pkp

    Could the problem have started when i protected the machines because i deleted the machines from the enterprise console after i upgraded because the entry in the console was showing them as still protected and did not recognise them as clean installs?

    Also on the client machine i am not seeing any service called "Sophos Management Agent" the closest being "Sophos Agent"

    Open Regedit and navigate to:
    HKEY_LOCAL_MACHINE\SOFTWARE\[Wow6432Node]\Sophos\M

    essaging System\Router\ParentAddress
    Does the parent address value reflect the management server ok?

    It picks up the correct management server and the client also updates from the server fine.

    Thanks in advance for your help

    :12219
Reply
  • 0

    Hi Jak, thank you for the detailed reply.

    8. On the client start the Sophos Message Router Service.
    Within a couple of seconds you should see the pkc and pkp value return under:
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Mes

    saging System\Router\Private

    The above entry in the registry does not exist nor does it create when i start the sophos client services.  I have set up a group policy allowing traffic TCP 8192-8194 as per http://www.sophos.com/support/knowledgebase/article/111180.html

    I also disabled the win firewall on the client machine and this still did not create any entry in the registry for pkc and pkp

    Could the problem have started when i protected the machines because i deleted the machines from the enterprise console after i upgraded because the entry in the console was showing them as still protected and did not recognise them as clean installs?

    Also on the client machine i am not seeing any service called "Sophos Management Agent" the closest being "Sophos Agent"

    Open Regedit and navigate to:
    HKEY_LOCAL_MACHINE\SOFTWARE\[Wow6432Node]\Sophos\M

    essaging System\Router\ParentAddress
    Does the parent address value reflect the management server ok?

    It picks up the correct management server and the client also updates from the server fine.

    Thanks in advance for your help

    :12219
Children
No Data