Duplicate UpdateManager on SEC Server

Hello tedz,

you have probably a good reason for changing the name of the management server. There's a recent thread on the Small Business board and a link to Changing domain name, computer name, or network type when the Enterprise Console is installed which tells you this is unsupported.

If you don't encounter any other issues you've been lucky - it's not clear though which name is duplicated and what else is incorrect in you Update managers view. Does you management server('s SUM) correctly appear with the new name or twice with the old one? Are "both" instances shown as connected? Perhaps you could provide a screenshot.

Christian

Hi Christian,

Please see link below for your reference of  the screenshoot for Update Manager.

http://ge.tt/2OTiiIp/v/0

Thank you,

Tedz

Hello tedz,

so WDBC-SOPHOS is your management server? Is this screenshot recent - the dates are from several days ago and it looks like SUM has reverted to the version in the installer package. It should have updated by now or otherwise reported an error. What does the Updates section on the dashboard say?

If you look up these machines on the endpoints view - are they connected, what is their Last message time (in Computer details)?

Christian

Hi Christian,

Yes, WDBC-SOPHOS is your management server. But is it updated.

If you look up these machines on the endpoints view - are they connected,  YES it also double.

Thanks,

Tedz

Hello tedz,

what are the Last message time values for the "two" WDBC-SOPHOS computers in the Endpoints view?

Also, in the Update managers view - if you request Update now for WDBC-SOPHOS, does the Download status change for any of the entries?

Christian

Hi Christian,

As of now the last message on the update manager on the endpoint view was on August 13. However when we see on the update manager side no coresponding error occured. Here are the senario of the duplicate update manager.

1. WDBC-Sophos IP xxx.xxx.xxx.181 is the old IP of the sophos server and has a sophos Subscription and it will not updated last August 13.

2. WDBC-Sophos IP xxx.xxx.xxx.56 new IP of the sophos server and NO configuration of sophos bec. is already used the shared name "\\WDBC-Sophos\SophosUpdate" and status of this was updated. How could it be?

Help!!!

Thank you :(

Tedz

Hi Christian,

Here are the details of two update manager.

1.

Computer name WDBC-SOPHOS
Computer description
Operating system Windows Server 2008
Service pack Service Pack 2
Domain/workgroup WORKGROUP
IP address yyy.yyy.yyy.56
Time of last binary update 8/23/2013 9:44:05 AM
Time of last protection data update 8/23/2013 9:44:05 AM

History

Update manager status Date/time Code Description
8/17/2013 5:12:08 AM 80040404 Threat detection data update failed.
8/17/2013 5:02:08 AM 80040404 Threat detection data update failed.
8/17/2013 4:52:08 AM 80040404 Threat detection data update failed.
8/17/2013 4:43:21 AM 80040401 Software update failed.
8/17/2013 4:43:21 AM 80040404 Threat detection data update failed.
8/17/2013 4:32:08 AM 80040404 Threat detection data update failed.
8/17/2013 4:22:10 AM 80040404 Threat detection data update failed.
8/13/2013 5:10:17 PM 80040404 Threat detection data update failed.

2. 

Computer name WDBC-SOPHOS
Computer description
Operating system Windows Server 2008
Service pack Service Pack 2
Domain/workgroup WORKGROUP
IP address xxx.xxx.xxx.181
Time of last binary update 8/13/2013 4:16:11 PM
Time of last protection data update 8/13/2013 4:16:11 PM

Software subscriptions status Software subscriptionMaintained in Last successful downloadError codeError description
Recommended \\WDBC-SOPHOS\SophosUpdate8/13/2013 4:13:19 PM

For reference.

Thanks,

Tedz

Hi,

Any Advice pls!

Tedz

I can't see that image (the page returns 'Error: getaddrinfo ENOENT at errnoException (dns.js:31:11) at Object.onanswer [as oncomplete] (dns.js:140:16)').  Anyway, probably not vital.

The way I see it you can follow one of two options:

• You have changed the computer's hostname while the Sophos management server software is installed; therefore accept that this is unsupported and can and does break many things.  Hence following the advice in the article QC linked (119532) and uninstall.  There is also an older article (64511) that asserts you can revert the change.
  
  
• Ignore that there are other things that may or may not be working at the moment and focus just on the duplicate machine name.  In that case I'm curious to know:
  1. If you attempt to edit the configuration of both SUMs to either or both throw an error (right-click and select 'View/Edit Configuration')?  If so what is the error?
     
     
  2. If you know which of the SUMs listed is the older object and you right-click and delete it?
     
     
  3. Noting whether or not point two was successful or not what is the output of this command:
     sqlcmd -E -S .\SOPHOS -d SOPHOS4 -Q "SELECT ComputersAndDeletedComputers.Name as 'SDDM Hostname', SDDMServers.ComputerID, SDDMServers.IdentityTag, CAST(IPAddress / 256 / 256 / 256 % 256 as varchar)+'.'+ CAST(IPAddress / 256 / 256 % 256 as varchar)+'.'+ CAST(IPAddress / 256 % 256 as varchar)+'.'+ CAST(IPAddress % 256 as varchar) as 'IP Address', SDDMServers.SDDMVersion FROM ComputersAndDeletedComputers INNER JOIN SDDMServers ON ComputersAndDeletedComputers.ID = SDDMServers.ComputerID" -w 1000 > %TEMP%\SDDMs.txt