Installing Sophos agent through group policy

[Commander_Data]

Hello everyone,

Issue:

In the past whenever I have imaged, add it to the right OU in AD, etc. I would need to install the Sophos Agent after all the normal steps.

I have a number of machines coming in soon, and I will need to image them. Thus I have researched into the matter, Sophos has an article on the matter. Which I followed:

https://community.sophos.com/kb/en-us/120611

Problem:

However, it has not installed. I have tried:

1) Checking the GP results it is listed under ‘applied GPO’s

2) Checking the event viewer on the work station, even the GP node.

Nothing is appearing in the form of an error?

 

Anyway to troubleshoot the matter. I don’t think it is a Loopback issue.

 

I know people have problems with this method of installation.

 

Thanks

[computer_expert]

Applocker or software restiction policies blocking the script from executing?

Is the installer less than 90 days old? https://community.sophos.com/kb/en-us/127044#How%20long%20will%20I%20be%20able%20to%20use%20the%20old%20installers?

[Commander_Data]

I will check thanks

[keyboards]

I've done this across various site from memory

 

Grou policy created

The exe is located on a file share

Then a script in computer configuration - policies- windows settings- scripts-startup

@echo off

SET MCS_ENDPOINT=Sophos\Management Communications System\Endpoint\McsClient.exe

IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG

IF NOT EXIST "%ProgramFiles(x86)%\%MCS_ENDPOINT%" GOTO INSTALL

exit /b 0

 

:X86_PROG

IF NOT EXIST "%ProgramFiles%\%MCS_ENDPOINT%" GOTO INSTALL

exit /b 0

 

:INSTALL

pushd \\CWS-DC02\Autoinstalls$

SophosSetup.exe --quiet

Popd

 

Also check you've got PC's wait for network at computer startup and logon on and look at the times, as it may not be getting enought time to run, I had to set settings for Sophos and others so that Windows gave it a very brief wait at the login screen for installs to start, otherwise people would login to quick or before the network had connected