This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Autoupdate failed and insufficient rights to do anything with Sophos

Hi Sophos team,

I had to register as I have annoying problem with Sophos. The most I got from my IT admin (who is in Denmark while I am on a stay in China) is to uninstall it and instal something else. While that's the last option. I will give a last try to ask you.

I neither have the rights to manipulate with Sophos properly (it says "insufficient right"), nor the autoupdate funtion works. This is all from today when I tried to delete a virus or whatever was it from usb, and I noticed the first one. Once I tried to fix using your (increadibly confusing and overloaded) forums, the auto-update stoped working as well. Its a bit annoying and I got a bit frustrated.

1. I have tried to fix the "sufficient rights" issue by following your posted procedure i.e. updating the SID numbers using the SophosLocalGroups.txt file but it didn't work. I also downloaded some file, and than copied it in the indicated lcoation and run it (which was suppose to automatically updade the SIDS) but it was waste of time in both reading and doing it.

2. I have tried to fix the auto-update issue, i even don't remember what I did, but i stoped the Sophos virus protection and did what was written in your post and activated it again. It didn't work.

Is there any solution except spending hours and trying to understand what SID and DSN settings are or?

Thanks a lot,

Kiril

p.s. for the record, when I start up my pc, the notification appears with "Sophos Endpoing Secirity and Control updater has faild to download", and in the update log the following appears (the other updates seem to work properly- as it says in the log):

Time: 23-07-2012 23:37:14
Message: Could not connect to the server. Check that this computer is connected to the network and that Sophos AutoUpdate is configured to update from the correct location with the correct credentials and proxy details (if required)
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:13
Message: Downloading product Sophos AutoUpdate from server \\SOFUS\SophosUpdate\CIDs\S000\SAVSCFXP\
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:11
Message: Could not add a connection to server \\SOFUS\SophosUpdate; user djf\sophos; Windows error 53
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:09
Message: Could not connect to the server. Check that this computer is connected to the network and that Sophos AutoUpdate is configured to update from the correct location with the correct credentials and proxy details (if required)
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:08
Message: Downloading product SAVXP from server \\SOFUS\SophosUpdate\CIDs\S000\SAVSCFXP\
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:06
Message: Could not add a connection to server \\SOFUS\SophosUpdate; user djf\sophos; Windows error 53
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:04
Message: Could not connect to the server. Check that this computer is connected to the network and that Sophos AutoUpdate is configured to update from the correct location with the correct credentials and proxy details (if required)
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:03
Message: Downloading product RMSNT from server \\SOFUS\SophosUpdate\CIDs\S000\SAVSCFXP\
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:01
Message: Could not add a connection to server \\SOFUS\SophosUpdate; user djf\sophos; Windows error 53
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:36:38
Message: *************** Sophos AutoUpdate started ***************
Module: ALUpdate
Process ID: 4808
Thread ID: 4412

:27249


This thread was automatically locked due to age.
Parents
  • Hello Kiril,

    can you access other servers (or computers) at your site when connected via VPN? I just did nslookup with the FQDN and it resolves to a 130.xxx.xxx.xxx address (obviously the server has also a private address within your home network). If nslookup does not return an address when you are connected via VPN but gives you the external (130.xxx.xxx.xxx) when VPN is off then it's likely an issue within your home network.If you don't get an address with or without VPN then it's likely an issue with your PC.

    Is Chrome your default browser (and does it work)?

    As for the log: You'll find the current log (SAV.txt) in [%ProgramData%|%ALLUSERSPROFILE%\Application Data]\Sophos\Sophos Anti-Virus\logs. It will contain the details of the detected items. Did you ever have problems viewing the log or is it the first time you needed it and perhaps just didn't notice before? Just asking to rule out the USB stick as cause of your recent problems. If you are not sure that Sophos is working correctly (apart from the AutoUpdate problem) you could try the Virus Removal Tool.

    As for updating: If you can't access/change the settings using the GUI you can't configure Sophos as update location (and you'd need your site's download credentials). Though you can download the latest detection items here (use the package corresponding to your data version, likely 4.78). 

    As for the problems with the GUI: If you click View product information (bottom left) it will tell you (after several seconds) your Current user rights. It should say Sophos Administrator if your account is a member of this local group.

    Christian 

    :27281
Reply
  • Hello Kiril,

    can you access other servers (or computers) at your site when connected via VPN? I just did nslookup with the FQDN and it resolves to a 130.xxx.xxx.xxx address (obviously the server has also a private address within your home network). If nslookup does not return an address when you are connected via VPN but gives you the external (130.xxx.xxx.xxx) when VPN is off then it's likely an issue within your home network.If you don't get an address with or without VPN then it's likely an issue with your PC.

    Is Chrome your default browser (and does it work)?

    As for the log: You'll find the current log (SAV.txt) in [%ProgramData%|%ALLUSERSPROFILE%\Application Data]\Sophos\Sophos Anti-Virus\logs. It will contain the details of the detected items. Did you ever have problems viewing the log or is it the first time you needed it and perhaps just didn't notice before? Just asking to rule out the USB stick as cause of your recent problems. If you are not sure that Sophos is working correctly (apart from the AutoUpdate problem) you could try the Virus Removal Tool.

    As for updating: If you can't access/change the settings using the GUI you can't configure Sophos as update location (and you'd need your site's download credentials). Though you can download the latest detection items here (use the package corresponding to your data version, likely 4.78). 

    As for the problems with the GUI: If you click View product information (bottom left) it will tell you (after several seconds) your Current user rights. It should say Sophos Administrator if your account is a member of this local group.

    Christian 

    :27281
Children
No Data