Sophos console help

[robmazco]

Almost all pcs on our domain check in nicely. but I have various pcs that check in with just the Error ! box (so no explanation of the trouble). Or they sit in the Unmanaged queue longing for attention.

Ive tried removing Sophos completely, I also have a bat file from Sophos that does a complete wipe from a pc, tried remote updating and complying with policies. Also went as far as to run an SID bat file to recreate a new SID on the pcs.

It also seems if you create a new policy and add pcs to it, it can sometimes screw up the pc and sophos does things listed above. IMO, this one thing should be addressed by Sophos, they even admit its a known problem.

Anyway, Ive gone thru everyhting I can think of to get these several troublesome pcs to cooperate. Anyone have tips or tricks they use to get everyone to conform ?

 

[paella33]

Where to they admin the problem? I do not have the same problems, but like to see this.

 

[robmazco]

Got this from Sophos:

1. Open the Windows Control Panel and double-click 'Scheduled Tasks'.
2. Change to 'Details' view (from the 'View' menu, select 'Details').
3. If the 'Creator' column is not displayed, right-click on 'Name' and select 'Creator'.
4. Copy all of the tasks created by 'System' to a backup location.
5. In the Scheduled Tasks window, delete all the tasks that were created by 'System'.
6. In Windows Services, stop the 'Task Scheduler' service. Keep the Services window open.
7. Navigate to C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18.
8. Delete all the files in the folder.
9. In Windows Services, restart the 'Task Scheduler' service.
10. Restart the computer.
11. In Enterprise Console or Sophos Control Center, reapply the Anti-Virus policy to the computer.
12. When the affected computer is listed as compliant, go back to it and open the folder where you put the backup files in step 4.
13. Delete any Sophos scheduled scans in this folder. These scans were re-applied in step 11, so you don't want to keep them.
14. Copy the remaining backup copies of the scheduled tasks back into the Scheduled Tasks window.
15. Right-click the task that failed, and select Run.


Seems Task manager an blow up sophos to some degree. This removed many of the troubels I was having.