Thread Info
  • State Suggested Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 33 replies
  • Answers 2 answers
  • Subscribers 16 subscribers
  • Views 63634 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MSI Installer for EndPoint Protection or Intune compatible deployment method

Sam Smith1

Hello

 

Is there any possibility of an MSI for deploying Endpoint Protection?

 

We are an MSP with a Managed Devices offering that is underpinned by Microsoft Intune.

We have been using Sophos Endpoint Protection as part of the solution and are very happy with its functionality.

Unfortunately the Endpoint Protection deployment method is proving a major barrier to wider adoption and larger deployments.

Currently we are having to install manually as part of the enrolment.

Intune only supports deploying MSI installers so we either need an MSI or an 'Intune compatible' method.

With the advent of Microsoft Autopilot, if we cannot better automate the Sophos deployments we will have to consider using Windows Defender as our protection.

 

Regards

Sam



This thread was automatically locked due to age.
Parents
  • 0

    It's not possible.  The only way you could deploy the install as an MSI would be to author an MSI to call SophosSetup.exe.  Would that even help?

    Regards,

    Jak

  • 0 in reply to jak

    Hello,

    Not possible or not available?

    I don't see what installer could possibly doing that couldn't now be done with an MSI.

     

    I tried out the re-authoring of an MSI that wraps the SophosSetup.exe and it did work but it was unnecessarily complicated and slightly messy.

     

    Regards

    Sam

  • 0 in reply to Sam Smith1

    I'll keep at it then and try advanced installer, thanks for taking the time to reply :)

     

    I do agree though, having a cloud based application to surely attract cloud based systems yet not supporting one of the main MDM systems via an msi installer is crazy.

  • 0 in reply to james cummings

    No worries.

    It does seem crazy.

  • 0 in reply to Sam Smith1

    I would suggest downloading and install WiX.  You can create a MSI with just a couple of commands and some XML.  For example.

    1. Download WiX - http://wixtoolset.org/releases/ and install it.

    2. Add the installation path of WiX to your PATH.  E.g. Add the following to your PATH variable:
    C:\Program Files (x86)\WiX Toolset v3.11\bin

    3. Save the attached file as SophosExeWrapper.wxs to say C:\sophosmsi\.  You could use the .txt but it should be .wxs.

    4. Download the correctly configured Cloud installer SophosSetup.exe from Central and save it to C:\sophosmsi\

    5. In an admin prompt, CD to \sophosmsi

    6. Run:
    candle SophosExeWrapper.wxs

    7. Run
    light SophosExeWrapper.wixobj

    You should then have a MSI file.

    Things to change in the XML (Product section at the top) first:
    1. UpgradeCode, go to: https://www.guidgenerator.com/online-guid-generator.aspx and generate a new GUID.
    2. Name if you wish for the package to appear differently.
    3. Manufacturer to be your company name for example.

    I hope it helps.

    There maybe some more tweaking you'd like to do to the XML after reading the WiX documentation but this could be a starting point.

    Regards,
    Jak

    4520.SophosExeWrapper.txt

  • 0 in reply to jak

    many thanks for this.  Running the msi alone seems to work unlike my previous tries.  I'm just trying to get intune to play nicely with it now...

  • 0 in reply to james cummings

    ok, it seems to install via intune but doesn't fully install.

     

    The central admin console lists the computer, but no green tick.  Go in to the computer properties in the central admin console and endpoint advanced is under the assigned products, however, there is no status tab.  there is no Sophos icon in the taskbar, but I can see some of the components in the process list.

     

    Can anybody point me in the right direction of what I need to check next?

  • 0 in reply to james cummings

    The installer log for sophossetup. It is in \programdata\sophos\cloudinstaller\logs\. I think cloud installer is the right directory off the top of my head. Can you attach it?

  • 0 in reply to jak

    arrgghhh, got in this morning and somebody had re-imaged the machine.  I'll try again and if the same thing happens I'll get the log attached.  

  • 0 in reply to james cummings

    ok, so I think it's sorted now on the install side.  However, I now have the opposite problem.  When I go to programs and features and try to uninstall the sophos endpoint package, I press uninstall, get the UAC prompt, press ok, then nothing happens.  That means that I cannot now uninstall the client.

    does anybody have any ideas where to look to troubleshoot this please?

  • 0 in reply to james cummings

    Well the Programs and Features entry in the registry:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos Endpoint Agent\
    UnintallString 

    Should point to: "C:\Program Files\Sophos\Sophos Endpoint Agent\uninstallgui.exe"

    I assume that file exists on disk and that component installed OK?

    Regards,

    Jak

  • 0 in reply to jak

    yes, it all appears to be installed correctly, the sophos central is all good for that computer and the registry key is there.  However, clicking uninstall still does nothing, it doesn't even register in the application event log that I tried to uninstall it.  It's very odd.

Reply
  • 0 in reply to jak

    yes, it all appears to be installed correctly, the sophos central is all good for that computer and the registry key is there.  However, clicking uninstall still does nothing, it doesn't even register in the application event log that I tried to uninstall it.  It's very odd.

Children
Unfiltered HTML