Startup Script to deploy Sophos Central Endpoint

[fiza]

I am trying to follow the instructions Sophos give to deploy the client via AD startup script https://community.sophos.com/kb/en-us/120611

 

I have put the actual installer in the same share that we use to deploy MSI software via AD so I know that share has the right permissions.

 

GPResults shows that the policy was deployed but the software doesn't get installed. Below is the script they give - What am I doing wrong?

 

@echo off
SET MCS_ENDPOINT="Sophos\Management Communications System\Endpoint\McsClient.exe"
IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG
IF NOT EXIST "%ProgramFiles(x86)%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:X86_PROG
IF NOT EXIST "%ProgramFiles%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:INSTALL
pushd \\servername\share\
SophosInstall.exe -q
Popd

[ReverentCreature]

Hi. That Script matches the one we have and it works for us. If you run the batch manually when logged in does it work?

 

Add "pause" to end of the script and then view it for errors when running it.

Do you get any installation errors in the event logs?

[round2it]

i have used this for years

this checks if a file is present if it is it ends

if not it runs the installer

 

not happy about having a username and password in plain text but all it is allowed to do is access the Sophos stuff I have not changed any of the rem text for about 7 years so it is out of date but it does work as a startup script

@echo OFF

REM --- Check for an existing installation of Sophos AutoUpdate

 

 

REM Uncomment out the following line to force install

if exist "C:\Program Files\Sophos\AutoUpdate\forceinstall2.txt" goto _End

REM Comment out the original if exist statement

 

Rem Comment the following line to force install

rem if exist "C:\Program Files\Sophos\AutoUpdate\alsvc.exe" goto _End

REM --- Deploy to Windows 2000/XP/2003/7

 

\\sophos\SophosUpdate\CIDs\S000\SAVSCFXP\Setup.exe -updp "\\sophos\SophosUpdate\CIDs\S000\SAVSCFXP" -user "domainname\username" -pwd "password" -mng yes

 

 

REM Uncomment out the following line to force install

echo Sophos client installed at %time% on %date% >> "C:\Program Files\Sophos\AutoUpdate\forceinstall2.txt"

 

REM --- End of the script

:_End

 

 

\\sophos\SophosUpdate\CIDs\S000\SAVSCFXP

[fiza]

Hi. That Script matches the one we have and it works for us. If you run the batch manually when logged in does it work?

 

Add "pause" to end of the script and then view it for errors when running it.

Do you get any installation errors in the event logs?

 

If I run the script as an admin it installs Sophos. It must be a permissions thing but I can't see how as the exe is in the same location as all our other software that gets deployed by AD.

[speckytecky]

Just a thought and probably wide of the mark but with out installs we had to run an elevated CMD session to ensure the proxy setting was being correctly applied.

 

cd C:\Windows\SysWOW64 [press enter]

netsh winhttp set proxy proxy-server=etc with port

Edited August 17, 2017 by speckytecky