Sophos Updating

[darrenmcginnis]

Hi

Has anyone come across the problem with Sophos not updating properly?

On the workstations, when you try and update Sophos it runs through 3 stages.

Stage 1 completes fine.

Stage 2 & 3 reports "Could not contact Server"

I have added the local SOPHOS_USR account into the Users group, with no success.


The only way I can get it to update is to delete the CID folder, restart the server then:

• Go into the Sophos Enterprise Manager
• Expand Central Installations
• Delete the existing Central Installation
• Delete the Shared CID Folder
• Restart the Server
• Continue to remove the .URL files that don't get deleted
• Go back into the Sophos Enterprise Manager
• Expand Packages and goto Subscribed
• Add a new CID
• Go through the wizard to finish
• Go back into Central Installations
• Then Update CID

I then need to wait a few mins for it to copy the files. It is getting frustrating.

Anyone got any ideas?

[speckytecky]

I'd ask Sophos support if I were you - they have always been first rate in answering any queries I pose.

[Andie]

I'd ask Sophos support if I were you - they have always been first rate in answering any queries I pose.

Same advice here. Our whole LA lost updates from mid April, due to an oversight by our ISP. I have additional support from a local secondary school, and they contacted Sophos support and got things going again very quickly.

[JJonas]

Check the username/password you are using has permissions to access the CID folder.

[darrenmcginnis]

Thanks everyone. Will try contacting Sophos...but last time they wanted a account number off me. Which doesn't help if it is the LEA that has those details.

JJonas: The Username / Password used to update the client are the Domain Administrator username and password. What is weird tho, is that when the problem occurs the servers seem to update the 3 stages correctly...which does lead me to believe it is a permissions error. But I am unsure why as the CID folder has the following permissions:

* DOMAIN Administrator: Full Control
* Localhost Administrators Group: Full Control
Creator Owner: Special Permissions
* DOMAIN Admins: Full Control
* DOMAIN Users: Read & Execute, List Folder Contents, Read
* Everyone: Read & Execute, List Folder Contents, Read
* SYSTEM: Full Control

* Indicates inherited permissions

[SYSMAN_MK]

Have you taken a look at the update logs on one of the clients to see whats happening?

[aerospacemango]

This is something that we were battling with, for a long time!

Are your machines pointed in the right direction for the updates? Have you looked in the "configure updates" page? (Sorry to ask such a dumbass question, but you never know )

You should have a local folder for updates, as your Primary, and Sophos as your secondary update point. Does that make sense? If these are correct, then I'd get on to Sophos Support and ask them to help!

[silver_uk]

Is this on all machine or just a few?
I found that re-installing Sophos cures the problem on a few PC's

[aerospacemango]

This is something that we were battling with, for a long time!

Are your machines pointed in the right direction for the updates? Have you looked in the "configure updates" page? (Sorry to ask such a dumbass question, but you never know )

You should have a local folder for updates, as your Primary, and Sophos as your secondary update point. Does that make sense? If these are correct, then I'd get on to Sophos Support and ask them to help!

Unbeknownst to me, at the time, but we had 2 Sophos servers going on....and most of the PC's were pointed at the wrong one. Once I took over the system, I've slowly got to a point where 98% of our stock is pointing in the right direction, and the other 2% are laptops that rarely come in to college.

It's taken a while, but we'll soon be switching off the "wrong" box. Updates work easily now, instead of having the same problems that you're getting.

[kili]

Darren, you should have a dedicated account for sophos updating, the problem with using the domain administrator account as you'll find out sooner or later is that when you change the password for the domain administrator your sophos updating account stops working as you've forgotten to enter the changed password in the sophos client deployment console. Also your clients when deployed use the username and password that you deployed them with to do thier updates from the CID that you specified when you deployed to the client.

So do your self a favour and create a dedicated sophos account with domain admin privileges and make sure the account is a member of the workstation admins account ( It probably already is as an administrator) other wise each time you change the password for the Domain Administrator your sophos clients will fail because their using the wrong password.