Hi
I am testing the installation and use of the stand-alone product Sophos Endpoint Security and Control (SES&C) for our staff. We have approximately six staff who will be using this.
The machine being used is an old XP Pro machine.
When I first tried the installation it failed with error 3004. The Computer Browser and Remote Registry services were running, but the registry key permissions needed fixing. After doing this the installation succeeded. The user account used for the install has administrative priviledges. I also chose the option to remove any third-party software, although I had removed what was previously installed via Add/Remove Programs.
The problem lies with the antivirus. The firewall is working fine as is the updating element. When the machine is booted the Sophos icon in the System Tray is normal but within a minute it changes to one with a red cross. A little later a message appears over the icon with the title:
Sophos Endpoint Security and Control service failure Sophos Endpoint Security and Control is not currently protecting your computer.
When I open services.msc the Sophos Anti-Virus and Sophos Web Intelligence services are not started. All the services are set to Automatic. The Log On properties for the SAV service are 'This account' NT AUTHORITY\LocalService. When I try to start the service the following message is displayed:
Services Could not start the Sophos Anti-Virus service on Local Computer. Error 0x80004005: Unspecified error
The user account I am logged on as is a member of the SophosAdministrator and SophosUser groups.
I can start SES&C. I can open the following: Configure firewall, View firewall log, Configure updating and View updating log. The remainder are greyed out.
The updating log shows success for each update.
Can anyone help me with this, please?
Thanks!
The system Event Log contains the following (earliest first):
Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7023 Date: 21/07/2012 Time: 05:58:03 User: N/A Computer: PAINKILLER Description: The Sophos Anti-Virus service terminated with the following error: Unspecified error
Event Type: Error Event Source: DCOM Event Category: None Event ID: 10010 Date: 21/07/2012 Time: 06:04:31 User: NT AUTHORITY\SYSTEM Computer: PAINKILLER Description: The server {D2B7A809-15DC-40B4-A1E1-C61EA97191DB} did not register with DCOM within the required timeout.
This thread was automatically locked due to age.
