Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 1 subscriber
  • Views 5097 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SophosUpdateMgr account in AD gone

Jun

Hi,

Our client have failed error on updating status and notice that SophosUpdateMgr account is no longer in our AD? Nobody remove that user account in AD.

Any idea what might have cause it? We uninstalled Sophos Update Manager in one of our dc server and could not reinstalled it again due to user authentication, you think this might have cause the error?

Thanks for those who could give some inputs.

:14397


This thread was automatically locked due to age.
Parents
  • 0

    HI,

    It wouldn't have been AutoUpdate (SAU) that removed the accounts you mention.  SAU only creates and removes the account: 

    SophosSAU[machineName]0

    This is typically a local account, unless SAU is installed on a DC of course.  

    Having said that....I belive on removal of SAU that the installer will look in:

    HKEY_LOCAL_MACHINE\SOFTWARE\[Wow6432Node]\Sophos\AutoUpdate\Service \

    "Download User"

    To know what account to remove, this should typically be the account I mention above but I guess you might have put in another account into this registry key?

    Otherwise it must have been other components that removed the groups, i.e. SEC, SUM.

    Regards,

    Jak

    :19155
Reply
  • 0

    HI,

    It wouldn't have been AutoUpdate (SAU) that removed the accounts you mention.  SAU only creates and removes the account: 

    SophosSAU[machineName]0

    This is typically a local account, unless SAU is installed on a DC of course.  

    Having said that....I belive on removal of SAU that the installer will look in:

    HKEY_LOCAL_MACHINE\SOFTWARE\[Wow6432Node]\Sophos\AutoUpdate\Service \

    "Download User"

    To know what account to remove, this should typically be the account I mention above but I guess you might have put in another account into this registry key?

    Otherwise it must have been other components that removed the groups, i.e. SEC, SUM.

    Regards,

    Jak

    :19155
Children
No Data