Adding new computer to domain

Hello quaine,

software is automatically installed

do you want to change the credentials used for the installation or the ones used for subsequent updates? The latter are set with the group's Updating policy. if it's an automatic install done by SEC with a synchronized group (i.e. the folder in the Groups pane is green) and you want to change the account used for initial installation right-click the group, select Synchronization Properties - you should easily spot the place where the credentials are set.

Christian

Christian,

   Thanks for your reply.  We have the auto-update working with the correct user name/pw but the initial install is where we are having the issue.  I have changed the user name/pw in the Synchronization Properties of the group and each time we add a new computer to our domain we continue to get the old user name/pw.  I have also made the same change in the Settings of our Updating Policy which seems to have corrected the auto-update process.  Could this name be hard-coded in an .conf or .ini file?  Thanks. 

Hello quaine,

we continue to get the old user name

the Sync Properties should be applied almost immediately. Is it indeed SEC which initiates the install? Other deployment methods are e.g. GPO/Computer Scripts. Could it be that it's done twice?

Christian

Christian,

   As I am taking over Sophos support for the former employee how would I tell if SEC is initiating the install?  What is a GPO deployment method?  Thanks.   

Hello quaine,

for GPO please see Deploying Endpoint Security and Control through Active Directory group policy.

each time we add a new computer to our domain we continue to get the old user name/pw

what means get the old user name/pw? Where does it show up? Does something fail which you have to correct?

If Install Sophos security software automatically is checked in the Properties then SEC will try to deploy the software. It does this only once - automatic deployment requires that the computer is on at the next synchronization. If SEC can't contact the computer when it has found it in AD the attempt will fail and not be retried.  

Christian

Did you try unchecking this?

Thanks Vikas, I will try this.  I assume it means whenever we add a new computer to the domain we will have to install the Sophos software manually?

Christian,

   Here is the scenario related to adding a new computer to the domain.  When we add a computer to the domain currently Sophos automatically installs the Sophos AutoUpdate Service which in turn should install the other pieces of Sophos software.  The issue is, when the install of the Sophos AutoUpdate Service occurs the username/pw being used to access the Sophos share to install the rest of the software is a person that is no longer with the company and therefore fails to install the remaining software.  If I Open Sophos Endpoint Security and Control from the Sophos icon in the Windows System Tray, then in the Updating box click on Configure updating, a popup is displayed with the Properties for Sophos AutoUpdate.  The username/pw in the Primary location tab are the values I want to change but can't seem to find where to change them.  Hopefully I described my issue a little better.  Thanks.

Hello quaine,

the account is set in the Synchronization Properties (not visible in Vikar's screenshot) - but you've said you've changed it and indeed it must be correct, otherwise not even AutoUpdate would install. Wild guess - is there perhaps a file named sauconf.xml in the \CIDs\Snnn\SAVSCFXP\sau\ folder? 

Christian 

Yes. You'll manually to have to Right Click and Protect the computers..