Installing AV on a read only domain controller

Question

Hi, 
 Has anyone had any luck doing this? I know the KB on Sophos advises to create a local account but as far as i'm aware you can't on RODC? 
 Thanks 
 Tom

QC · Accepted Answer

Hello Tom, 
 guess it's trying to create the Sophos Groups - and naturally fails (details should be in the Sophos Anti-Virus Major CustomActions Log with label CreateUserGroups ). Are there any of the Sophos Groups in AD? Is Sophos already installed on a writable DC (in this case they should already exist)? If not all groups are there please create the missing ones as domain local groups. 
 Christian

QC · Answer

Hello Tom, 
 it should work if you specify a domain account as Download user following Manually creating an AutoUpdate account . 
 Christian