Sophos Central Endpoint deployment via GPO.

[IT_Man_Dan]

Morning All,

 

I'm having issues deploying Sophos Central Endpoints via GPO startup script.

I've followed the instructions here: https://support.sophos.com/support/s/article/KB-000035049?language=en_US but it just doesn't seem to install on startup after a few gpupdates etc.

 

I can run the script manually in the share and it installs fine.

I've tried placing both the script and exe file in our gporesources share that we use for other gpo software installations and I have also tried placing the script in the appropriate sysvol scripts folder location.

 

Any ideas please?

 

Many thanks

Dan

[MrKJLS]

Morning All,

 

I'm having issues deploying Sophos Central Endpoints via GPO startup script.

I've followed the instructions here: https://support.sophos.com/support/s/article/KB-000035049?language=en_US but it just doesn't seem to install on startup after a few gpupdates etc.

 

I can run the script manually in the share and it installs fine.

I've tried placing both the script and exe file in our gporesources share that we use for other gpo software installations and I have also tried placing the script in the appropriate sysvol scripts folder location.

 

Any ideas please?

 

Many thanks

Dan

Get yourself the free PDQ Deploy and deploy it with that

[IT_Man_Dan]

Thanks for reply. I have the free PDQ deploy (it's excellent) but I want it automated so there's no risk of missing a client. I don't want to pay for pdq if I can help it.

[JOrdan01070]

Hi this is the script I use

@echo off

SET MCS_ENDPOINT=Sophos\Management Communications System\Endpoint\McsClient.exe

IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG

IF NOT EXIST "%ProgramFiles(x86)%\%MCS_ENDPOINT%" GOTO INSTALL

exit /b 0

:X86_PROG

IF NOT EXIST "%ProgramFiles%\%MCS_ENDPOINT%" GOTO INSTALL

exit /b 0

:INSTALL

\\servershare\SophosSetup.exe --products=antivirus --quiet

 

not had any problem with it not installing.

[slugshead]

ClientSophosSetup.exe --quiet

 

Is what I use in SCCM.

[Koldov]

Here is ours, very similar apart from the last line with the push:

 

@echo off
SET MCS_ENDPOINT=Sophos\Management Communications System\Endpoint\McsClient.exe
IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG
IF NOT EXIST "%ProgramFiles(x86)%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:X86_PROG
IF NOT EXIST "%ProgramFiles%\%MCS_ENDPOINT%" GOTO INSTALL
exit /b 0

:INSTALL
pushd \\server\share$
SophosSetup.exe --quiet
Popd

 

Not had any problems installing either...

 

In general if you've had no problems installing other software from that share, you can browse to it and can run the .exe, the script is the correct folder in sysvol (you can view the file in the GPO), the GPO is for Computers and the scope links the correct OU and includes the correct security filtering group, everything is actually called the right name and is pointing to the correct locations, then I can't think of much else...

 

Event Viewer?

Edited July 6, 2021 by Koldov

[round2it]

startup script here but just moved to sophos cloud much easier to deploy

[the_quick]

Same script as above, with GPO as startup script for all domain computers. Works great, nothing get missed

[grahamd22]

classic startup script works everytime