This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

This solution is not acceptable

I work in a School District that is extremely understaffed.  We have 3000+ computers and 1 person to work on tech problems and one person to manage the network.  Up until this year we ran Sophos as standalone on all machines but setup the console and have managed to get 350 machines in the console.  That still leaves 2700+ computers running Sophos stand alone.  This screw up has affected the large majority of our computers and you expect us to some how go out and touch every one of these machines?  That would take our department probably a year to do.  I need to know the best ideas of what can be done to fix this.  We can not be without updated antivirus for long.  I need suggestions quick because I have people to answer to.

:32263


This thread was automatically locked due to age.
Parents
  • Hi Hudson,

    Ok, going to make a few assumptions here for you in this situation. Firstly, Can we assume that the 2700 odd machines have access to a file share somewhere or an intranet site? Do the users have administrative rights to their PC's (if there's no domain/active directory, I'm assuming they probably do). If so, you could create a script along the lines of:

    net stop "Sophos Anti-Virus"

    net start "Sophos Autoupdate Service"

    "%programfiles%\sophos\autoupdate\almon.exe"

    Email them and get them to download and run the script. When run, the shield should appear again so ask them then to right-click the sophos shield and 'update now'. When it's updated, reboot and you should be good to go again. That should fix the majority but then they'll be the ones that have 'deleted' their quarantine items. For those you'll need to download and script replacement of the missing fies a-la:

    stop sophos av, copy missing files, start au service, run almon and 'update' then reboot.

    I'm sure there's some decent scripter out there who could improve this but the rough 3 liners above should work for the marjority at least,

    Matt

    :32315
Reply
  • Hi Hudson,

    Ok, going to make a few assumptions here for you in this situation. Firstly, Can we assume that the 2700 odd machines have access to a file share somewhere or an intranet site? Do the users have administrative rights to their PC's (if there's no domain/active directory, I'm assuming they probably do). If so, you could create a script along the lines of:

    net stop "Sophos Anti-Virus"

    net start "Sophos Autoupdate Service"

    "%programfiles%\sophos\autoupdate\almon.exe"

    Email them and get them to download and run the script. When run, the shield should appear again so ask them then to right-click the sophos shield and 'update now'. When it's updated, reboot and you should be good to go again. That should fix the majority but then they'll be the ones that have 'deleted' their quarantine items. For those you'll need to download and script replacement of the missing fies a-la:

    stop sophos av, copy missing files, start au service, run almon and 'update' then reboot.

    I'm sure there's some decent scripter out there who could improve this but the rough 3 liners above should work for the marjority at least,

    Matt

    :32315
Children
No Data