This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos AV and firewall deployment via startup script

Hello,

Quick bit of help i hope, i'm trying to add the deployment of our AV to the startup script and would like some advice.

I've followed through http://www.sophos.com/en-us/support/knowledgebase/13090.aspx but it looks like it only deploys the AV side of things, also it doesn't appear to kick off CRT to remove the existing AV, any suggestions?

This is what i have currently.

@ECHO OFF
REM --- Check for an existing installation of Sophos AutoUpdate on 32-bit (the 'Sophos AutoUpdate Service' process)
IF EXIST "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe" goto _End
REM --- Check for an existing installation of Sophos AutoUpdate on 64-bit (the 'Sophos AutoUpdate Service' process)
IF EXIST "C:\Program Files (x86)\Sophos\AutoUpdate\ALSVC.exe" goto _End
REM --- Check for an existing installation of Sophos Anti-Virus on 2003/XP (the SAV adapter config file)
IF EXIST "C:\Documents and Settings\All Users\Application Data\Sophos\Remote Management System\3\Agent\AdapterStorage\SAV\SAVAdapterConfig" goto _End
REM --- Check for an existing installation of Sophos Anti-Virus on Vista+ (the SAV adapter config file)
IF EXIST "C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\SAV\SAVAdapterConfig" goto _End
REM --- Check for servers not to install to
if %COMPUTERNAME% == <removed> goto _End
if %COMPUTERNAME% == <removed> goto _End

if %COMPUTERNAME% == <removed> goto _End
if %COMPUTERNAME% == <removed> goto _End

if %COMPUTERNAME% == <removed> goto _End
if %COMPUTERNAME% == <removed> goto _End

if %COMPUTERNAME% == <removed> goto _End
if %COMPUTERNAME% == <removed> goto _End

if %COMPUTERNAME% == <removed> goto _End
if %COMPUTERNAME% == <removed> goto _End
REM --- Deploy to Windows 2000/XP/2003/Vista/Windows7/2008/2008-R2
\\<removed>\SophosUpdate\CIDs\S000\SAVSCFXP\Setup.exe -updp "\\bukwlpictv01\SophosUpdate\CIDs\S000\SAVSCFXP" -user <removed> -pwd <removed> -mng yes
REM --- End of the script
:_End

:46957


This thread was automatically locked due to age.
  • Thanks for the response, I followed your link and tried a new startup script which i've copied below, I decided that i needed to test so applied to a test OU which at first did nothing so i forced it and it appears to ignore the non interactive/ silent install switch.

    Can't see what i've done wrong.

    @ECHO OFF

    REM --- Check for an existing installation of Sophos AutoUpdate on 32-bit (the 'Sophos AutoUpdate Service' process)
    IF EXIST "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe" goto _End

    REM --- Check for an existing installation of Sophos AutoUpdate on 64-bit (the 'Sophos AutoUpdate Service' process)
    IF EXIST "C:\Program Files (x86)\Sophos\AutoUpdate\ALSVC.exe" goto _End

    REM --- Check for an existing installation of Sophos Anti-Virus on 2003/XP (the SAV adapter config file)
    IF EXIST "C:\Documents and Settings\All Users\Application Data\Sophos\Remote Management System\3\Agent\AdapterStorage\SAV\SAVAdapterConfig" goto _End

    REM --- Check for an existing installation of Sophos Anti-Virus on Vista+ (the SAV adapter config file)
    IF EXIST "C:\ProgramData\Sophos\Remote Management System\3\Agent\AdapterStorage\SAV\SAVAdapterConfig" goto _End

    REM --- Deploy to Windows 2000/XP/2003/Vista/Windows7/2008/2008-R2
    \\<removed>\SophosUpdate\CIDs\S000\SAVSCFXP\setup.exe -mng yes -crt R -scf -updp -ouser <removed> -opwd <removed> -s -ni

    REM --- End of the script
    :_End

    :46987
  • HI,

    What it you protect a "test" computer from SEC, with SCF, CRT set, etc. At the same time monitor the scheduled tasks on that "test" endpoint.  When the Sophos install task is created have a look at the command line being run.

    If you re-use that command line does it work?

    Regards,

    Jak

    :46993
  • The script doesn't run silently now for some reason, it promptas user with a yes/no dialogue.

    :47077