Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 37 replies
  • Subscribers 1 subscriber
  • Views 51317 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Windows 7 64bit and Sophos 9.7 Problem

Trevor

Hi,

Bit of a issue here which is baffling me.

Set up a new Subcription to 9.7 Recommended and created a new CID on AV server.

Setup a new Policy with the correct subscription which applies to a number of XP machines and 4 Windows 7 64bit machines.

The XP machines are all compliant with the new policy and have automatically upgraded from 9.5 to 9.7.

I've manually installed 9.7 to the Win 7 machines from the new CID (S002).

The issue I'm having is after 60 mins or so (automatic update schedule) the Win 7 workstations are checking for updates and then downgrading themselves back to version 9.5!

Both Win 7 and XP machines are sharing the same updating policy.

Any ideas?

:12561


This thread was automatically locked due to age.
Parents
  • 0

    Thanks, Trevor

    Now in the agent log there's always the same AU policy mentioned: RevID="{45C762D1-E334-432C-B489-5CC70320A9E9}" . Searching for this value in column CorrelationID in table Policies leads to a Type=1 (AU) policy. If there's no name in column Name but n*xxxxx...*xxx... (which is expected for a non-legacy policy) then looking up the value between the *s in the CorrelationID column leads to the Type=18 (AU) policy and its name.

    Can't say why the "endpoint id" changes several times - it corresponds to column IdentityTag in ComputersAndDeletedComputers and usually persists. Don't ask me how it is derived, when set and where it is stored.

    Dunno if this is of any help - I still have no idea what's causing this but to me it looks like it is indeed getting the policy from SEC.

    Christian

    :12827
Reply
  • 0

    Thanks, Trevor

    Now in the agent log there's always the same AU policy mentioned: RevID="{45C762D1-E334-432C-B489-5CC70320A9E9}" . Searching for this value in column CorrelationID in table Policies leads to a Type=1 (AU) policy. If there's no name in column Name but n*xxxxx...*xxx... (which is expected for a non-legacy policy) then looking up the value between the *s in the CorrelationID column leads to the Type=18 (AU) policy and its name.

    Can't say why the "endpoint id" changes several times - it corresponds to column IdentityTag in ComputersAndDeletedComputers and usually persists. Don't ask me how it is derived, when set and where it is stored.

    Dunno if this is of any help - I still have no idea what's causing this but to me it looks like it is indeed getting the policy from SEC.

    Christian

    :12827
Children
No Data