Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 6530 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Installing Stand Alone Using a GPO

N3ptoon

Hello Guys and Gals,

I am a bit stuck on this issue. I am trying to install the Stand Alone installer using a GPO. The start-up script worked fine previously however it kept on screwing up the mapping of people's personalized Z drives. So I tried to alter the script so that it deletes the Z drive after it is done.

The GPO has a security group called SW - SophosInstall set. Joined a new computer to the domain, applied the policy and rebooted. Waited about 30mins. And nothing. For some reason Sophos doesn't install. Any help would be appreciated...

The start-up script that I am using

@echo off
SET MCS_ENDPOINT=Sophos\Management Communications System\Endpoint\McsClient.exe
IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG
IF NOT EXIST "%ProgramFiles(x86)%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:X86_PROG
IF NOT EXIST "%ProgramFiles%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:INSTALL
pushd \\Server\deploy\Sophos\
SophosMcsEndpoint_D713OE827NC4P825c.exe -crt R -q
Popd
net use z: /delete

:45711


This thread was automatically locked due to age.
  • 0

    Hello N3ptoon,

    this looks like the Cloud version.

    worked fine previously

    Has something changed - it looks like it should never have worked. According to How to deploy the Sophos Cloud installer the flag for dealing with third-party software is -tps <detect|ignore|remove> and not -crt. Don't think setup accepts the latter. Did you check the Sophos Cloud installer log files?

    Apart from that - a startup script (as opposed to a login script) should not mess with the user's mappings. And net use Z: /DELETE is redundant as popd should remove the mapping.  Furthermore while pushd, like net use *, maps from Z: on down it will use another letter if Z: is already in use (which could be the case if it's a login script).

    Christian

    :45725
  • 0

    Hello Christian,

    its not the Sophos Cloud installer. The installer that I am trying to push out is the one that was downloaded from a UTM 425 firewall. I just found this article How to Deploy Sophos Anti-Virus Endpoint managed by UTM 9 which is exactly what I am trying to do. 

    However the GPO gets applied but no Sophos shows as being installed.

    :45743
  • 0
    Hello N3ptoon,

    I see, wasn't aware that UTM also uses the MCS.
    Anyway, according to the articles linked from the one you've mentioned like with the Cloud installer the flag is -tps and not -crt, and I guess the logs can be found in the same place. If there are none then there's a problem with (running) the script, otherwise the reason for the failed install is likely recorded there.

    Christian
    :45755