This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoint Proctection

Hi

I am trying to deploy the sophos agent to a server, it fails, the error says the credentails dont have correct rights, if I logon to the server with the credentials, I can do a manual install from the CID folder.

I do have a series of group policies that ensure only  certain accounts have log on as a service, log on as a batch etc, the Sophos service account is in all of these groups

:39683


This thread was automatically locked due to age.
  • Hello HaydnD,

    if I logon to the server with the credentials

    do you (or can you) use the same credentials to access the CID?

    Christian

    :39707
  • Hello HaydnD,

    so the Protect Computers seems to start (you don't get an immediate error and the overlay on the client icon changes to the yellow hourglass) but then you get an error (which one)? Or what exactly is the sequence of events?

    Christian

    :39763
  • Hi

    So, if I right click the server, select protect computer and follow the on screen wizard, all goes OK.

    The overlay changes to the yellow hour glass, then the download icon, then a few seconds later, the is an error alert under the alerts and errors column.

    When I open the error it the error reads that the computer account does not have the require permissions

    :39823
  • ** Update

    Hi

    Sorry - the download does not appear, I have just built a new server and got the exact message for you

    Computer name DC1-EDGE001
    Computer description
    Operating system Windows Server 2008 R2
    Service pack
    Domain/workgroup BVN
    IP address
    Sophos Anti-Virus version
    HIPS rules
    HIPS configuration
    Detection data
    On-access scanning
    Anti-virus and HIPS policy
    Last scheduled scan completed
    Last message received from computer
    Up to date
    Updating policy
    Time installed package became available
    Time next package became available
    Primary update server
    Secondary update server
    Client firewall enabled
    Client firewall policy
    Client firewall version
    Client firewall mode
    Sophos NAC policy
    Compliance Agent (NAC) version
    Sophos NAC compliance assessment
    Application control policy
    Application control on-access scanning
    Data control scanning status
    Device control scanning status
    Data control policy compliance
    Device control policy compliance
    Full disk encryption
    Encrypted volumes
    Unencrypted volumes
    Full disk encryption policy
    Encryption agent version
    Hardware encryption
    Power-on authentication enabled
    Wake on LAN enabled
    Tamper protection status
    Tamper protection policy compliance
    Patch assessment
    Patch policy
    Patch agent version
    Web control status
    Web control policy
    Group \Servers\Servers\Citrix\BackEnd

    Installation failed            

    Date/time                              Code             Description
    5/6/2013 12:08:39 PM        0000002b    The installation credentials you entered in the "Protect Computers Wizard" are either  incorrect or do not give administrator access to the computer over the network.

    :39825
  • Hello HaydnD,

    obviously there's a difference when logging on locally with this account as opposed to using it to schedule the task remotely (and running the task with these credentials). Can't say what it could be.

    While the reason likely could (to paraphrase an old math professor of mine) easily be found with simple but tedious troubleshooting it's up to you whether it'd be really worth the effort. If protecting other computers works and it's just this one server which refuses I'd rather install manually and forget the issue.

    Christian

    :39837