Sophos Enterprise Console

[pagelad]

Ive recently started a process of checking through the antivirus on all our domain computers within the school.

We use Sophos Enterprise manager on our server to synchronise groups with the AD and to automatically protect the machines. Unfortunately though some machines just refuse to automatically protect through the console.

I read around a bit online and the general consens seems to point me at the bootstrap installers? Ive had a play with this and arent getting much joy.

Does anyone have any tips and tricks on how to get this to work?

[soveryapt]

Our LEA offers this as advice:

Setting up Standalone Install Share

1) Download the standalone share package from <LEA Share>
2) Extract the contents into a shared software distribution folder a network server.
3) Create a Group Policy with the following script in a batch file (Replace SERVER and to represent your server name):

REM @echo OFF

REM --- Check for an existing installation of Sophos AutoUpdate

if exist "C:\Program Files\Sophos\AutoUpdate\ALsvc.exe" goto _End

if exist "C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe" goto _End

REM --- Deploy to Windows

\\SERVER\Path\to\Share\SAVinstall\Setup.exe -mng no -ni -s -crt R

REM --- End of the script

:_End

4) Link the Group Policy to the highest OU containing computer accounts

Don't know if that would help or not.

[Mr.Ben]

I use the following to start the initial Sophos installation, as the enterprise console can't automatically protect my machines. Once installed they update and report correctly though.

\\Servername\SophosUpdate\CIDs\S000\SAVSCFXP\setup .exe -updp "\\Servername\SophosUpdate\CIDs\S000\SAVSCFXP" -user "Administrator" -pwd "MyPa55w0rd" -mng yes -s -ni

[FN-GM]

I use the following to start the initial Sophos installation, as the enterprise console can't automatically protect my machines. Once installed they update and report correctly though.

\\Servername\SophosUpdate\CIDs\S000\SAVSCFXP\setup .exe -updp "\\Servername\SophosUpdate\CIDs\S000\SAVSCFXP" -user "Administrator" -pwd "MyPa55w0rd" -mng yes -s -ni

I used to do the same, worked pretty well!

[joe90bass]

Are you having a problem with Vista or 7? If so have you had a look at How to configure a GPO to ensure that you can protect and manage computers with endpoint software I've found XP to be okay with auto-protecting but Vista and 7 a PITA

[pagelad]

I use the following to start the initial Sophos installation, as the enterprise console can't automatically protect my machines. Once installed they update and report correctly though.

\\Servername\SophosUpdate\CIDs\S000\SAVSCFXP\setup .exe -updp "\\Servername\SophosUpdate\CIDs\S000\SAVSCFXP" -user "Administrator" -pwd "MyPa55w0rd" -mng yes -s -ni

Its XP,

That looks like the best option. Just found the command after the first post.

Ill give that a go thanks!

[3s-gtech]

With 7, I have to enable Remote Registry in the Services MMC for auto installation to work - with that done, auto installation etc works perfectly.