This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Autoupdate failed and insufficient rights to do anything with Sophos

Hi Sophos team,

I had to register as I have annoying problem with Sophos. The most I got from my IT admin (who is in Denmark while I am on a stay in China) is to uninstall it and instal something else. While that's the last option. I will give a last try to ask you.

I neither have the rights to manipulate with Sophos properly (it says "insufficient right"), nor the autoupdate funtion works. This is all from today when I tried to delete a virus or whatever was it from usb, and I noticed the first one. Once I tried to fix using your (increadibly confusing and overloaded) forums, the auto-update stoped working as well. Its a bit annoying and I got a bit frustrated.

1. I have tried to fix the "sufficient rights" issue by following your posted procedure i.e. updating the SID numbers using the SophosLocalGroups.txt file but it didn't work. I also downloaded some file, and than copied it in the indicated lcoation and run it (which was suppose to automatically updade the SIDS) but it was waste of time in both reading and doing it.

2. I have tried to fix the auto-update issue, i even don't remember what I did, but i stoped the Sophos virus protection and did what was written in your post and activated it again. It didn't work.

Is there any solution except spending hours and trying to understand what SID and DSN settings are or?

Thanks a lot,

Kiril

p.s. for the record, when I start up my pc, the notification appears with "Sophos Endpoing Secirity and Control updater has faild to download", and in the update log the following appears (the other updates seem to work properly- as it says in the log):

Time: 23-07-2012 23:37:14
Message: Could not connect to the server. Check that this computer is connected to the network and that Sophos AutoUpdate is configured to update from the correct location with the correct credentials and proxy details (if required)
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:13
Message: Downloading product Sophos AutoUpdate from server \\SOFUS\SophosUpdate\CIDs\S000\SAVSCFXP\
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:11
Message: Could not add a connection to server \\SOFUS\SophosUpdate; user djf\sophos; Windows error 53
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:09
Message: Could not connect to the server. Check that this computer is connected to the network and that Sophos AutoUpdate is configured to update from the correct location with the correct credentials and proxy details (if required)
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:08
Message: Downloading product SAVXP from server \\SOFUS\SophosUpdate\CIDs\S000\SAVSCFXP\
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:06
Message: Could not add a connection to server \\SOFUS\SophosUpdate; user djf\sophos; Windows error 53
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:04
Message: Could not connect to the server. Check that this computer is connected to the network and that Sophos AutoUpdate is configured to update from the correct location with the correct credentials and proxy details (if required)
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:03
Message: Downloading product RMSNT from server \\SOFUS\SophosUpdate\CIDs\S000\SAVSCFXP\
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:01
Message: Could not add a connection to server \\SOFUS\SophosUpdate; user djf\sophos; Windows error 53
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:36:38
Message: *************** Sophos AutoUpdate started ***************
Module: ALUpdate
Process ID: 4808
Thread ID: 4412

:27249


This thread was automatically locked due to age.
Parents
  • Hello kiril982, from the logs it's clear that AutoUpdate can't connect to server SOFUS - no surprise as you are obviously "elsewhere". It could only work if you have a tunnel (e.g. VPN) to your home network. As to the rights - if your account (I assume it is an administrator account) belongs to the Sophos Administrators group dealing with threats is not restricted. If it isn't - and this is likely caused by the install sequence, i.e. The account has been created /promoted after install of Sophos - it can simply be corrected by adding the account to this group, no fiddling with SIDs required. An end user shouldn't have to turn to the forum for these questions though. If this is a managed install the IT administration is responsible for providing working update locations and should also be aware how user rights are assigned. If you want to get rid of a "something" on USB you can simply delete it from Windows (deleted won't get blocked). For AutoUpdate to succeed you either need a connection to SOFUS, an alternate (WebCID) location on your site or your site's/employer's credentials to update from Sophos. Christian
    :27251
Reply
  • Hello kiril982, from the logs it's clear that AutoUpdate can't connect to server SOFUS - no surprise as you are obviously "elsewhere". It could only work if you have a tunnel (e.g. VPN) to your home network. As to the rights - if your account (I assume it is an administrator account) belongs to the Sophos Administrators group dealing with threats is not restricted. If it isn't - and this is likely caused by the install sequence, i.e. The account has been created /promoted after install of Sophos - it can simply be corrected by adding the account to this group, no fiddling with SIDs required. An end user shouldn't have to turn to the forum for these questions though. If this is a managed install the IT administration is responsible for providing working update locations and should also be aware how user rights are assigned. If you want to get rid of a "something" on USB you can simply delete it from Windows (deleted won't get blocked). For AutoUpdate to succeed you either need a connection to SOFUS, an alternate (WebCID) location on your site or your site's/employer's credentials to update from Sophos. Christian
    :27251
Children
No Data