So how does "Protect Computers" actually work?

Hi All,

First post - I have been deploying Sophos in enterprise environments since SAV v4 but have never actually had to ask a question - a testament to the product and the information already available from the community and knowledgebase!

I need to understand how the client push function in EC actually works. As we all know it creates a scheduled task (and from this point it's blindingly obvious how it works), but what I need to know how exactly it goes about creating this task.

I can see at least two options:

a) It uses the windows "schtasks" utility with appropriate parameters.

b) It accesses the remote filesystem directly through SMB.

I'm pretty sure its option B, in which case I need to ascertain the exact UNC used - is it using \\YourPC\admin$\Tasks or \\YourPC\C$\Windows\Tasks (or something else?)

Any further info on this would be greatly appreciated.

While this is a request for info, the problem (if anyone is interested) is that I can't push the client to machines with the system installed to a drive other than C:, leading me to believe that the system is hard-coded to push to c$.

Thanks!

Rob