Cant Start Management Console

Hi,

Looks like the Windows group to SQL login is off.  Try the following commands, replacing "CONTEXTOFGROUP" to be the machine name (NETBIOS) if the "Sophos DB Admins" group is a local group.  If the group is a domain group then it would be the domain name, for example if SEC was installed on a DC.  Note the square brackets should be used.  I've also assumed you are using a SOPHOS named SQL instance.

Drop Login

sqlcmd -E -S .\sophos -Q "DROP LOGIN [CONTEXTOFGROUP\Sophos DB Admins]"

E.g.

sqlcmd -E -S .\sophos -Q "DROP LOGIN [SERVERA\Sophos DB Admins]"

Create Login

sqlcmd -E -S .\sophos -Q "CREATE LOGIN [CONTEXTOFGROUP\Sophos DB Admins] FROM WINDOWS"

E.g.

sqlcmd -E -S .\sophos -Q "CREATE LOGIN [SERVERA\Sophos DB Admins] FROM WINDOWS"

Re-map

sqlcmd -E -S .\sophos -d sophos50 -i "C:\ResetUserMappings.sql"
sqlcmd -E -S .\sophos -d sophospatch -i "C:\ResetUserMappings.sql"

where C:\ResetUserMappings.sql should contain:

DECLARE @user_name NVARCHAR(128); 
SET @user_name = (SELECT TOP(1)
         [name] 
      FROM 
         sys.database_principals 
      WHERE 
         [name] LIKE '%Sophos DB Admins');
DECLARE @login_name NVARCHAR(128); 
SET @login_name = (SELECT TOP(1)
         [name] 
      FROM 
         sys.server_principals 
      WHERE 
         [name] LIKE '%Sophos DB Admins'); 
DECLARE @sql NVARCHAR(max);
SET @sql = N'ALTER USER [' + @user_name + N'] WITH LOGIN = [' 
+ @login_name + N']';
EXEC sp_executesql @stmt = @sql;

This is taken from the SEC 5 migration guide:
http://www.sophos.com/sophos/docs/eng/migration/sec_50_mgeng.pdf  

I can only assume that the Sophos DB Admins group was removed and re-creatred at some point.

Hope it helps.

Regards,

Jak 

Hi JTHoB,

Alternatively try teh steps below.

In the event that the above has not resolved your issue, please contact support for further assistance.

1. Remove the user from the instance using the command (edit the DOMAINNAME to be the domainname or servername depending on the location of the Sophos DB Admins group):
   
   sqlcmd -E -S .\Sophos -Q "IF  EXISTS (SELECT * FROM sys.server_principals WHERE name = N'DOMAINNAME\Sophos DB Admins')DROP LOGIN [DOMAINNAME\Sophos DB Admins]"
   
   
2. Re-add the user using the sql command:
   
   sqlcmd -E -S .\Sophos -Q "CREATE LOGIN [DOMAINNAME\Sophos DB Admins] FROM WINDOWS WITH DEFAULT_DATABASE=[master], DEFAULT_LANGUAGE=[us_english]"
   
   
3. Reinstall the Sophos databases using the scripts:
   
   C:\Sec50\ServerInstaller\DB\Core\InstallDB.bat
   C:\Sec50\ServerInstaller\DB\Patch\CreatePatchDB.bat
   
   For instructions on running these scripts, please see article 116768 Creating the Sophos databases using the command line tools
   
4. Complete the upgrade and transfer of data to the new databases by running the command:
   
   C:\Program Files\Sophos\Enterprise Console\upgradedb.exe -debug
   
   For instructions on running this script, please see article 65420: Using the UpgradeDB.exe tool
   
   
5. Start the Sophos Management Service and Sophos Management Host Service