Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 2331 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Offline updates - isched.cfg being overwritten? Setup complete indicator?

Elbow

Apologies for all the questions - having a few issues.  Process I've been following to update machines that aren't currently fully networked:

- copy SAVSCFXP folder to the target server

- stop Sophos AV service

- run setup.exe from the SAVSCFXP folder

Bit of time passes then:

- Sophos AV service seems to start up itself

- isched.cfg file gets overwritten with settings from unknown source

Can anyone tell me where the settings that end up in isched.cfg are found?  Also, if I use the "mng no" command line switch with setup, isched.cfg gets overwritten with entirely other settings.  Where do they come from? 

Also - how do I tell when the setup installation has completed?  Is there something I can look out for?

Hopefully that all makes sense,

Thanks in advance.

:35709


This thread was automatically locked due to age.
  • 0

    Hello Elbow,

    my bad, may bad. In retrospect I've blundered in my last reply: AutoUpdate does of course not call setup.exe but the Installer - AutoUpdate and setup.exe have different intents.  While AutoUpdate tries to keep settings setup.exe (re-)initializes them. I'll try to do better this time.

    isched.cfg

    Is it really isched.cfg? It controls whether the automatic updating can be configured using the GUI, updating is enabled, the frequency and if it should run if dial-up is detected. Can't see why -mng no should result in entirely other settings (well, AllowLocalConfig is expected to be 1 instead of 0 if the computer is not managed) but I've never checked. The "templates" are in SAVSCFXP\sau\CommonAppData\Sophos\AutoUpdate\DefaultConfig and customized according to the parameters specified (and the environment found), for example -updp and credentials modify iconn.cfg.

    how do I tell when the setup installation has completed?

    AFAIK, on an unmanaged computer the Sophos System Tray icon notifies you with Sophos Protection or something like that when it's up and running (not only after install but whenever Almon has initialized I think). Open the SESC GUI - if all items are active (colored) the install has completed. Also there are the logs in the %TEMP% directory. Guess the exact point in time is not critical though.

    Christian

    :35711
  • 0

    Hey again Christian!  Apologies for the vaguess of some of my replies - I have a very specific set up and I for various reasons there are some fine details I can't go into.

    Ok... that makes some sense.  Do you know which file is actually being run when the right click Autoupdate option is clicked?

    The figures in the autoupdate frequency (after I've tried to update) are not the existing ones (though the setup.exe reinitilisation thing makes sense) but it also doesn't seem to be the figures from the defaultconfig folders either.  I will double check, but the frequency I'm left with doesn't seem to be specified in any config that I see.

    The reason I ask about the installation completion - I'm scripting some bits and bobs to happen before and after the updates run.  Hence the need for some 'flag' that states it's complete, so my other processes can begin.

    I need to update rather than reinitialise as such.  But if it's easier to reinitialise then that's ok with me.

    :35713
  • 0

    Hello Elbow,

    you might want to read Sophos AutoUpdate: significant files and registry entries and search for ObjALC in this forum. There might also be some information how you can determine that an update is in progress. Furthermore, this guide mentions a MSPSetData.vbs (which I wasn't aware of until today and don't know where to get from) which sounds like it could be adapted for your purpose.

    Christian

    :35717
  • 0

    Hi again..

    Yeah, I stumbled upon a little bit of vbs which seems to help when I searched for that.  Looks good.  I'll see what I can dig out about the complete flag too.

    Thanks again!

    :35721