This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Prompted for credentials when running Sophos client on workstation

When Sophos Endpoint Security and Control is ran from workstation, UAC pops up wanting credentials.  We have never seen this until the last few weeks or so.  It is sporadic across campus.  If the logged in user enters their domain credentials, the window disappears and the client window opens.

In addition to this, the right click to scan feature isn't work either.  From the info I am getting, it appears to be on the same workstation where users are being prompted for credentials that I mentioned above.

Thanks

:53147


This thread was automatically locked due to age.
  • Hello dluneau,

    SavMain.exe's (this is the program presenting the GUI) manifest specifies requestedExecutionLevel level="highestAvailable". Thus there should be no prompt for standard users, only for Administrators - therefore I assume the domain user has local admin rights. Whether it's a Prompt for consent or a Prompt for credentials depends on the UAC settings. Prompt for credentials has likely been set by either a GPO or local security settings - as it is not the default.

    right click to scan feature isn't work either

    That is, nothing happens when Scan with Sophos Anti-Virus is selected from the right-click menu?

    Christian

    :53173
  • Thanks for replying Christian.  Until recently, we have not seen the prompt before.  With the exception of sporadic cases of the prompt issue we are seeing, domain users can run SavMain.exe without being prompted for credentials and we typically elevate SavMain.exe when running as admin which prompts for credentials.  I'll have to check out GPO settings.

    Exactly - nothing happens when Scan with Sophos Anti-Virus is selected from the right-click menu and it seems to be mainly on workstations that are having the prompt issue.  However, the right-click scan menu has happen with out the prompt issue (running savmain.exe) also.

    Thanks again,

    Dusty

    :53199
  • QC,

    You were right on target.  The UAC prompt and right-click scan issue were the result of GPO.  We have a domain security group, that we add users to, so they can administer the network connection on a pc with their domain user account.  This is also not allowing the right-click scan funtion.  If we remove the user from the group, no prompt when opening sophos and right-click scan works. 

    Thanks,

    :53241