Push Sophos Connect via GPO/Script

[Olliedawg]

Hi all,

 

Trying to deploy Sophos Connect to staff laptops following this guide : https://support.sophos.com/support/s/article/KB-000040793?language=en_US - seem to be running into problems.

 

I have the .MSI for sophos connect located in a shared folder on one of our servers " \\example\Sophos Connect VPN Client\SophosConnect_2.2.90_(IPsec_and_SSLVPN) " This share is used for other .MSI files such as teams( \\example\Teams Deployment), so I know the permissions are set right.

 

.Bat file for sophos install is located in " \\example\sysvol\scripts\sophos connect push ".

 

When I run the bat file a Windows Installer dialog box appears, along with the cmd window which states " UNC paths are not supported. Defaulting to windows directory. "

 

I can press " OK " on this dialog box, although this then closes the installer window, along with the CMD window.

 

Any pointers will be much appreciated,

Edited March 3, 2023 by Olliedawg

[Mako]

The batch file method is the same as Sophos Endpoint, except the article for Endpoint has the correct guidance.

 

Try modifying the :INSTALL section with:

 

:INSTALL
pushd \\example\Sophos Connect VPN Client\path-to-shared-folder
SophosConnectClientExecutable.exe --quiet
Popd

[Olliedawg]

The batch file method is the same as Sophos Endpoint, except the article for Endpoint has the correct guidance.

 

Try modifying the :INSTALL section with:

 

:INSTALL
pushd \\example\Sophos Connect VPN Client\path-to-shared-folder
SophosConnectClientExecutable.exe --quiet
Popd

 

Many thanks for the response, I have edited the code as follows.

 

 

 SET Sophos_Connect=Sophos\Connect\scvpn.exe
IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG
IF NOT EXIST "%ProgramFiles(x86)%\%Sophos_Connect%" GOTO INSTALL
exit /b 0
:X86_PROGIF NOT EXIST "%ProgramFiles%\%Sophos_Connect%" GOTO INSTALL
exit /b 0
:INSTALL
pushd \\server\Sophos Connect VPN Client
SophosConnect.msi --quiet
Popd
pause 

 

Which is now giving this message

 'SophosConnect.msi' is not recognized as an internal or external command,operable program or batch file. 

[Mako]

Well I am an idiot, because I completely missed the part where this was an MSI file and not an .exe file.

 

Try this:

 

:INSTALL
pushd \\example\Sophos Connect VPN Client\path-to-shared-folder
msiexec.exe /i "SophosConnect.msi" /QN
Popd

[Olliedawg]

Well I am an idiot, because I completely missed the part where this was an MSI file and not an .exe file.

 

Try this:

 

:INSTALL
pushd \\example\Sophos Connect VPN Client\path-to-shared-folder
msiexec.exe /i "SophosConnect.msi" /QN
Popd

 

Lol no worries - i missed that too.. Absolute legend that has worked! Thank you very much.

 

Now another question - can this be modified to also install the newest version ontop of a previous installation of Sophos Connect?

 

I'm presuming that if I remove this section then this will be the case?

 

IF "%PROCESSOR_ARCHITECTURE%" == "x86" GOTO X86_PROG
IF NOT EXIST "%ProgramFiles(x86)%\%Sophos_Connect%" GOTO INSTALL
exit /b 0
:X86_PROGIF NOT EXIST "%ProgramFiles%\%Sophos_Connect%" GOTO INSTALL
exit /b 0

Edited March 3, 2023 by Olliedawg

[Olliedawg]

Just checked event viewer, this does seem to be the case with regards to updating the version.

 

I can use this as a double whammy now to also upgrade older versions to the .msi version

 

Thanks again for your input Mako