Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 4468 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Reinstall Sophos after failed installation automaticaly

4ndr3

Hello

I want to ask, if someone knows if it is possible to configure SEC, that it trys to install the endpoint security again and again(for example every 30 minutes), if the first automatic installation failed until Sophos is installed on the PC

Problem is, we install our PCs with SCCM and after the Installation finisched and the PC is added to our AD, there is many other Software, that will be installed by SCCM. Sophos syncs every 60 minutes with the AD and trys to install Endpoint Security on new PCs. In this time mostly other Software installations are in progress and the Sophos installation failes.

I know, that it is possible to install the Sophos Client via SCCM, but we want to outsource our SCCM Server and after that, the SCCM Server wouldn't have access to the Sophos Server.

:35843


This thread was automatically locked due to age.
Parents
  • 0

    Hello 4ndr3,

    it isn't. The feature to (re-)attempt with each sync install was there (for a short time, perhaps only in the Beta) but has been removed. The reason is not immediately obvious. During the Beta I noticed that a too short interval can cause an "install loop". My suggestion at this time was to introduce a lower limit for the retries. Evidently further investigation and/or reported issues have lead to the conclusion that retries are not only not as good an idea as initially assumed but rather problematic. First of all, if the install actually fails SEC will keep retrying indefinitely. Thus extra logic would have been needed - at least to limit the number of attempts. Then you can assume that in most cases a subsequent install will fail for the same reason as the first one.

    Thus right now there's only one attempt - if it fails it won't be retried, even if you remove the PC from the synched group and/or delete it in SEC (you'd have to delete it from the database).

    Christian 

    :35877
Reply
  • 0

    Hello 4ndr3,

    it isn't. The feature to (re-)attempt with each sync install was there (for a short time, perhaps only in the Beta) but has been removed. The reason is not immediately obvious. During the Beta I noticed that a too short interval can cause an "install loop". My suggestion at this time was to introduce a lower limit for the retries. Evidently further investigation and/or reported issues have lead to the conclusion that retries are not only not as good an idea as initially assumed but rather problematic. First of all, if the install actually fails SEC will keep retrying indefinitely. Thus extra logic would have been needed - at least to limit the number of attempts. Then you can assume that in most cases a subsequent install will fail for the same reason as the first one.

    Thus right now there's only one attempt - if it fails it won't be retried, even if you remove the PC from the synched group and/or delete it in SEC (you'd have to delete it from the database).

    Christian 

    :35877
Children
No Data