+ Post New Thread
Results 1 to 11 of 11
Windows Thread, Sophos EM refuses to work! in Technical; I have a server that runs WSUS and Sophos EM. Something random happened to it and both stopped working. I ...
  1. #1

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180

    Sophos EM refuses to work!

    I have a server that runs WSUS and Sophos EM. Something random happened to it and both stopped working. I fixed WSUS quite easily but Sophos is being a PITA.

    I have re-installed multiple times, including re-installs of SQL Express (both 2005 and 2008) wioth no luck. Every time it comes up with an error which the Sophos knowledge base reckons has somethign to do with the user account that the management service is trying to run as - this 'magical' management service just refuses to start!

    I was beginning to think it hated x64 Windows (Server 2003) buit then I remembered that it did work.

    Ideas?

  2. #2

    Join Date
    Jan 2008
    Posts
    172
    Thank Post
    18
    Thanked 10 Times in 9 Posts
    Rep Power
    15
    Weird mate.

    Only thing I can think of is that a user account it uses has somehow been moved to a different OU or taken out of a security group somewhere?

  3. #3

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180
    Quote Originally Posted by m1ddy View Post
    Weird mate.

    Only thing I can think of is that a user account it uses has somehow been moved to a different OU or taken out of a security group somewhere?
    It uses the local system account.

  4. #4
    mullet_man's Avatar
    Join Date
    Oct 2005
    Location
    Oldham
    Posts
    726
    Thank Post
    34
    Thanked 46 Times in 45 Posts
    Rep Power
    26
    Have you tried logging in via the local account and running Sophos?

  5. #5

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180
    Quote Originally Posted by mullet_man View Post
    Have you tried logging in via the local account and running Sophos?
    You cannot login with the local system account - it is an account for running services and therefore is denied local logon rights. The service does not start however.

    Upon closer inspection, it appears to be a database connection issue... hmmm.

  6. #6
    User3204's Avatar
    Join Date
    Aug 2006
    Location
    Wirral
    Posts
    769
    Thank Post
    55
    Thanked 66 Times in 62 Posts
    Rep Power
    34
    Quote Originally Posted by Ric_ View Post
    You cannot login with the local system account - it is an account for running services and therefore is denied local logon rights. The service does not start however.

    Upon closer inspection, it appears to be a database connection issue... hmmm.
    Actually, you can logon as the system account, you just SHOULDN'T.

    Is there nothing useful in the Eventlog or whatever Sophos uses to log "events" ?


    The number of times I've had to re-install the equivalent Mcafee EPO server, due to it buggering itself up... I run it as a VM now, and just keep a working backup copy.

  7. #7

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180
    Quote Originally Posted by User3204 View Post
    Actually, you can logon as the system account, you just SHOULDN'T.
    You can't unless you explicitly allow it... obviously I'm not going to do this because you shouldn't.

    I discovered that I had forgotten to allow 'named pipes' for SQL but it seems that the Management Server database is simply not being created

    I've tried v3.0.0 and v3.1.0 and I'm now at the point of finding the manual adjuster so that I can teach it a lesson!

    It should just work... I hate it!

  8. #8

    Join Date
    Nov 2008
    Location
    Cape Wrath
    Posts
    32
    Thank Post
    0
    Thanked 4 Times in 4 Posts
    Rep Power
    17
    You haven't mentioned what error you are getting? Something like "0x8004005 Unspecified error"?

    The Sophos Management service needs to (1) get to the database and (2) authenticate with the SQL server when it gets there.

    The database could be local, remote. Housed in an instance called whatever you like. Be MSDE or SQL. The SQL server might require SQL authenication or Windows AD. First check the SOPHOS3.mdf and SOPHOS3_log.ldf actually exist and you know where you are going (local, remote... read above).

    Check in the registry under Sophos\EE\Management Tools for DatabaseConnectionMS

    That's the string that tells the service where to go. You can do a UDL test (create a new txt document on the Desktop and call it anything.udl). Run it and select from the provider tab "CannotRememberRememberHowItStartsButItEnds... .. for SQL Server" (about three-quarters down) and click next. Then enter the serverName\instanceName, select "Windows Intergrated" and then choose the SOPHOS3 database from the list. Click "Test connection" and hopefully it should work. Click OK and then edit the UDL with notepad and compare the provider string with what's shown in the DatabaseConnectionMS string.

    While you're in the registry check a key beneath the "Management Tools" key called "DatabaseUser". If the windows intergrated option in the UDL file worked you don't need any credentials in here. Rename the "DatabaseUser" key to "DatabaseUserOLD" and try and start the service.


    TTFN

  9. #9

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180
    @PcDude: Thanks for that... the SOPHOS3 database doesn't seem to be getting created, despite trying several user credentials. Something needs a good kick!

  10. #10

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180
    What a muppet! Since re-trying the install on a x86 server, the one thing I hadn't tried was using the inbuilt MSDE instance.

    The thing now works (I think) so all is well.

  11. #11
    lukang's Avatar
    Join Date
    Jun 2009
    Location
    nonya
    Posts
    16
    Thank Post
    0
    Thanked 4 Times in 2 Posts
    Blog Entries
    1
    Rep Power
    11
    No it is a database issue that can be seen in the registry that prevented the Management service from working.
    Go to the registry in
    HKLM\software\sophos\EE\Management tools\ databaseconnectionsMS
    Then make sure that the information for the server is correct.

    Also in the database user key ( one rung lower ) you will see a reg key that says UseClearText that info should be 0 and the information above it should be blank.
    I have seen information in this location cause the console to not open.

SHARE:
+ Post New Thread

Similar Threads

  1. WDS refuses to install the right OS
    By Ric_ in forum Windows
    Replies: 5
    Last Post: 23rd October 2008, 01:39 PM
  2. "if you can't work with them, work round them"
    By djm968 in forum General Chat
    Replies: 45
    Last Post: 30th June 2008, 11:13 AM
  3. Network Manager refuses to install OpenOffice - comments please.
    By t20racerman in forum Educational Software
    Replies: 86
    Last Post: 29th February 2008, 02:12 PM
  4. Replies: 5
    Last Post: 2nd July 2007, 08:20 AM
  5. One PC refuses to run script! Help!!!
    By woody in forum Scripts
    Replies: 6
    Last Post: 5th October 2005, 11:37 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •