Endpoint installation via Group Policy

Question

Hi all,

I've tried using the Enterprise console for deploying the agent (using 'Protection') with no luck on multiple PCs

1) It's just not working. I'm also not able to disable UAC from our computers which could be the problem

2) When I attempt to deploy from console there is no 'status' of the running task. Am I missing an option here as I would assume that you would be able to see the status of any running tasks success/failure etc

Is there an option for me to package an installation? I.E. create the settings I want and deploy it using my software of choice (either Group Policy or Dell KACE will be used). This would seem to be the easiest option.

Thanks for your help

This thread was automatically locked due to age.

jak · Accepted Answer

HI,

I would suggest upgrading to SEC 5.1 if you haven't done so yet. This changes the deployment method slightly which I'm sure will help you.

Other options you have include:

1. Running setup.exe from the CID with the necessary switches. Details on setup.exe here: http://www.sophos.com/en-us/support/knowledgebase/12570.aspx 
 This can be run from a startup script in AD where you check for a marker of Sophos to prevent it keep running at each startup.. Something like: http://www.sophos.com/en-us/support/knowledgebase/13090.aspx

Note: if you protect a test machine from SEC, you can view the scheduled task properties to obtain a deployment string.

2. If you really want to package up the install would be to use the deployment packager but this is more for remote installations. http://www.sophos.com/en-us/support/knowledgebase/67504.aspx . The latest version is 1.2: 
 https://secure.sophos.com/support/updates/dp/full/sdp_12_sfx.exe 
 which has some nice options over 1.1 it seems. I've just found it today!

Regards, 
 Jak :25381