Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1419 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is there a way to tell EM to protect more computers in bulk?

nduda78

Say you highlight 100 computers and protect them, it does then in batches of how many, like 5? Basically, the 100th computer on the list gets protected last and it can take a long time for that to happen. 


Maybe we are impatient, but deploying globally at once, we rely on some offices to complete first. I've been staring at a system with the orange hourglass for a couple hours now just waiting for it to get its place in queue.

Anyway to tell EM or the SUM to open up more install threads?

:20503


This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    As far as I know, there is one install task queue background thread and one install result queue background thread.
     
    Every twelve seconds, if install task queue is not empty, it will create schedule task on endpoint machine and run it.  Then computer will be added to request queue background thread (for feedback). 

    Every twelve seconds, for each computer in the result queue, if setup is not completed for 20 minutes than it'll time out and GUI will display install failure installation time out.  If setup is completed but no RMS message for 1 hour, then it'll time out and GUI will display install failure no message received

     
    So for 50 computers it should take 50 X 12seconds = 10 minutes to finish setting up schedule tasks and running them. 


    The install queue simply creates schedule task and run and keep on doing that, if it fails to create/run scheduled task, error will be logged and it’’’’ll carry on.   The result queue will poll computer to check the result and set as time out after a period, so there is no blocking/waiting.


    The DWORD keys that can be used to alter this behavior are as follows: 
     
    HKLM\SOFTWARE\[Wow6432Node]\Sophos\EE\Management Tools\InstallResultTimeInterval                    

    12*1000                               = 12 seconds


    This is the interval time install result queue background thread will check for install status (for all computers in the queue, not just for one)
     
    HKLM\SOFTWARE\[Wow6432Node]\Sophos\EE\Management Tools\InstallTimeInterval                                

    12*1000                               = 12 seconds
    This is the interval  time install task queue background thread will schedule and run scheduled task on endpoint machine.
     (we don’’’’t want all endpoints to be installed and log in\request certificate all at the same time, so this will do gradually)
     
    HKLM\SOFTWARE\[Wow6432Node]\Sophos\EE\Management Tools\MaximumInstallTimeInterval            

    20*60*1000                        = 20 mins
    This is maximum time management service will wait for client booststrap setup to complete.
     
    HKLM\SOFTWARE\[Wow6432Node]\Sophos\EE\Management Tools\MaximumInstallMessageTime          

    60*60*1000                        =  1 hour


    This is maximum time management service will wait for first RMS message to reach management service.

    So you could fiddle with these DWORD keys, you would need to restart the Sophos Management Service after adding/changing the keys.

    For real speed for mass deployment an AD startup script could break the back of it?

    Hope it helps.

    Regards,

    Jak
     

    :20511
Reply
  • 0

    Hi,

    As far as I know, there is one install task queue background thread and one install result queue background thread.
     
    Every twelve seconds, if install task queue is not empty, it will create schedule task on endpoint machine and run it.  Then computer will be added to request queue background thread (for feedback). 

    Every twelve seconds, for each computer in the result queue, if setup is not completed for 20 minutes than it'll time out and GUI will display install failure installation time out.  If setup is completed but no RMS message for 1 hour, then it'll time out and GUI will display install failure no message received

     
    So for 50 computers it should take 50 X 12seconds = 10 minutes to finish setting up schedule tasks and running them. 


    The install queue simply creates schedule task and run and keep on doing that, if it fails to create/run scheduled task, error will be logged and it’’’’ll carry on.   The result queue will poll computer to check the result and set as time out after a period, so there is no blocking/waiting.


    The DWORD keys that can be used to alter this behavior are as follows: 
     
    HKLM\SOFTWARE\[Wow6432Node]\Sophos\EE\Management Tools\InstallResultTimeInterval                    

    12*1000                               = 12 seconds


    This is the interval time install result queue background thread will check for install status (for all computers in the queue, not just for one)
     
    HKLM\SOFTWARE\[Wow6432Node]\Sophos\EE\Management Tools\InstallTimeInterval                                

    12*1000                               = 12 seconds
    This is the interval  time install task queue background thread will schedule and run scheduled task on endpoint machine.
     (we don’’’’t want all endpoints to be installed and log in\request certificate all at the same time, so this will do gradually)
     
    HKLM\SOFTWARE\[Wow6432Node]\Sophos\EE\Management Tools\MaximumInstallTimeInterval            

    20*60*1000                        = 20 mins
    This is maximum time management service will wait for client booststrap setup to complete.
     
    HKLM\SOFTWARE\[Wow6432Node]\Sophos\EE\Management Tools\MaximumInstallMessageTime          

    60*60*1000                        =  1 hour


    This is maximum time management service will wait for first RMS message to reach management service.

    So you could fiddle with these DWORD keys, you would need to restart the Sophos Management Service after adding/changing the keys.

    For real speed for mass deployment an AD startup script could break the back of it?

    Hope it helps.

    Regards,

    Jak
     

    :20511
Children
No Data