This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Windows 7 64bit and Sophos 9.7 Problem

Hi,

Bit of a issue here which is baffling me.

Set up a new Subcription to 9.7 Recommended and created a new CID on AV server.

Setup a new Policy with the correct subscription which applies to a number of XP machines and 4 Windows 7 64bit machines.

The XP machines are all compliant with the new policy and have automatically upgraded from 9.5 to 9.7.

I've manually installed 9.7 to the Win 7 machines from the new CID (S002).

The issue I'm having is after 60 mins or so (automatic update schedule) the Win 7 workstations are checking for updates and then downgrading themselves back to version 9.5!

Both Win 7 and XP machines are sharing the same updating policy.

Any ideas?

:12561


This thread was automatically locked due to age.
Parents
  • Hello Trevor,

    setup.exe installs autoupdate which then upon the "first" update install SAVXP so it is normal that the AutoUpdate "update" is skipped at this point. As it has updated/installed from the S002 CID (you see this in the update log, don't you) and no change has been made to AU the location should be still S002. If it no longer is at this point (i.e. before the reboot) it must have been (re-)set somehow. Question is - how is "somehow".

    Turning on the Agent and Router trace would reveal if the policy comes from the console. The keys and values are

    HKLM\SOFTWARE\Wow6432Node \Sophos\Remote Management System\ManagementAgent "LogLevel"= dword:00000002

    HKLM\SOFTWARE\Wow6432Node \Sophos\Remote Management System\ Router "LogLevel"=dword:00000002

    guess they "survive" a reinstall.

    Christian

    :12773
Reply
  • Hello Trevor,

    setup.exe installs autoupdate which then upon the "first" update install SAVXP so it is normal that the AutoUpdate "update" is skipped at this point. As it has updated/installed from the S002 CID (you see this in the update log, don't you) and no change has been made to AU the location should be still S002. If it no longer is at this point (i.e. before the reboot) it must have been (re-)set somehow. Question is - how is "somehow".

    Turning on the Agent and Router trace would reveal if the policy comes from the console. The keys and values are

    HKLM\SOFTWARE\Wow6432Node \Sophos\Remote Management System\ManagementAgent "LogLevel"= dword:00000002

    HKLM\SOFTWARE\Wow6432Node \Sophos\Remote Management System\ Router "LogLevel"=dword:00000002

    guess they "survive" a reinstall.

    Christian

    :12773
Children
No Data