Turning off Sophos restart now messages

[googlemad]

Getting complaints that machines are auto updating if a user doesn't click fast enough (Or in other words, they're not reading the message and clicking Restart Now but lets just ignore that for now!)

 

Is there any way to turn off the Sophos update restart prompt? I think it happens when a program update is released.

[Michael]

Yes it happens time to time with new program releases. You do have the option of restart later on the same window, so I think users need to open their eyes a bit more.

[MYK-IT]

As Michael said, this restart is usually only when there is a new program update / revision.

 

It has probably appeared due to this

 

As far as i am aware you cannot surpress it, but you could configure Enterprise Console to check for updates outside of certain hours, but more then likely the computer will still prompt the first time you switch the computer on the following day.

[jack0w]

We had this problem on several computers in Enterprise Console which were not clearing for one reason or another. There is a work around detailed here - Enterprise Console: error 0000006d - alert does not clear following reboot

[ZeroHour]

The prompt appears but after it times out I thoughts its default action was to hide and not to force a reboot?

[john]

The prompt appears but after it times out I thoughts its default action was to hide and not to force a reboot?

Correct, that is the default, its the usual user not reading the message problem, we've had it with Windows Updates that have got out of sync for one reason or another and kids have hit restart now and not saved work and then lost it etc, better end user education needed IE RTFM! - Read the flipping message!

[googlemad]

Yes - I was hoping there was a way to hide the message from the 'just click owt' crowd but never mind. Maybe I'll suggest it to Sophos.

[PcDude]

I think this is what you're looking for:

 

Sophos Anti-Virus for Windows 2000+: suppressing the post-upgrade reboot request

 

Summary:

(1) grab the CID's (ESXP, SAVSCFXP folder) configuration as a xml file

(2) add the line it mentions

(3) apply the updated xml file back to the CID

(4) machines updating from that CID will pull down the savconf.xml to their AutoUpdate\Cache folder and will know to hide the prompt.

 

The default action is to prompt the currently logged on user to restart. The message appears for 30 seconds or so. After that the message dissappears but DOES NOT force a restart. The reboot is required to load in new drivers though SAV continues to function as normal.

[sukh]

depending on what version you are using, version 8 which was the latest that I worked with, didnt just reboot machines after the updates. It depends on what is being updated? Your normal AV definitions etc dont require a reboot, and if it's the engine, they only get released about every quarter from Sophos. You can also customise messages when they appear and there is a deferral option.

[FN-GM]

is there sophos client 8

[sukh]

Sophos 8 is the version of product deployed on your backend infrastucture. Client versions are different, because you have many version for different components you've deployed. Use the EML library & EM Console to configure options I listed before.

 

Makes sense?

[FN-GM]

yep

[googlemad]

Advisory: The Sophos Endpoint Security and Control update to be released in February 2009 will require a reboot

 

Looks like they read my mind and have decided to hide the reboot prompt in future