Thread Info
  • State Suggested Answer
  • +2 person also asked this people also asked this
  • Locked Locked
  • Replies 33 replies
  • Answers 2 answers
  • Subscribers 16 subscribers
  • Views 63636 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MSI Installer for EndPoint Protection or Intune compatible deployment method

Sam Smith1

Hello

 

Is there any possibility of an MSI for deploying Endpoint Protection?

 

We are an MSP with a Managed Devices offering that is underpinned by Microsoft Intune.

We have been using Sophos Endpoint Protection as part of the solution and are very happy with its functionality.

Unfortunately the Endpoint Protection deployment method is proving a major barrier to wider adoption and larger deployments.

Currently we are having to install manually as part of the enrolment.

Intune only supports deploying MSI installers so we either need an MSI or an 'Intune compatible' method.

With the advent of Microsoft Autopilot, if we cannot better automate the Sophos deployments we will have to consider using Windows Defender as our protection.

 

Regards

Sam



This thread was automatically locked due to age.
Parents
  • 0

    It's not possible.  The only way you could deploy the install as an MSI would be to author an MSI to call SophosSetup.exe.  Would that even help?

    Regards,

    Jak

  • 0 in reply to jak

    Hello,

    Not possible or not available?

    I don't see what installer could possibly doing that couldn't now be done with an MSI.

     

    I tried out the re-authoring of an MSI that wraps the SophosSetup.exe and it did work but it was unnecessarily complicated and slightly messy.

     

    Regards

    Sam

  • 0 in reply to james cummings

    ok, so I think it's sorted now on the install side.  However, I now have the opposite problem.  When I go to programs and features and try to uninstall the sophos endpoint package, I press uninstall, get the UAC prompt, press ok, then nothing happens.  That means that I cannot now uninstall the client.

    does anybody have any ideas where to look to troubleshoot this please?

  • 0 in reply to james cummings

    Well the Programs and Features entry in the registry:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos Endpoint Agent\
    UnintallString 

    Should point to: "C:\Program Files\Sophos\Sophos Endpoint Agent\uninstallgui.exe"

    I assume that file exists on disk and that component installed OK?

    Regards,

    Jak

  • 0 in reply to jak

    yes, it all appears to be installed correctly, the sophos central is all good for that computer and the registry key is there.  However, clicking uninstall still does nothing, it doesn't even register in the application event log that I tried to uninstall it.  It's very odd.

  • 0 in reply to james cummings

    If that file is there it is very odd.  The only think I can suggest at this point is to run it while running Process Monitor (docs.microsoft.com/.../procmon) to see what happens?  Maybe some of the events in a trace make it obvious.

    Regards,
    Jak

  • 0 in reply to jak

    I'm going to reset the pc and see if it's the msi installer that's causing the issues first by manually installing from the .exe instead.  I'll let you know.

  • 0 in reply to james cummings

    nope, totally did the same with installer downloaded from the cloud central.  Will see if I can't log a ticket with sophos, this is crazy!

  • +1 in reply to james cummings

    If running:
    "C:\Program Files\Sophos\Sophos Endpoint Agent\uninstallgui.exe"

    does nothing, that is very odd indeed.

    I'd be equally interested to try launching an admin command prompt and:

    CD "C:\Program Files\Sophos\Sophos Endpoint Agent"
    run:
    uninstallcli.exe

    Does that work?

    I'd still be interested to see a Process Monitor Capture when running uninstallgui.exe if Support draw a blank.

    Regards,
    Jak

  • 0 in reply to jak

    sorry for the late reply.  I did log a support call with Sophos but since sending them the logs they seem to have hidden.  No response!

     

    Firstly, the problem only occurs on our Surface devices - desktops can uninstall without a problem.  odd!

     

    I ran the uninstallcli.exe and that worked - hurrah!  thank you for that.  However, I'd still like sophos to investigate why it's not uninstalling from the control panel as it should work.  If they ever get back with an answer I will update the thread, but for now, we have a workable solution - thank you :)

  • 0 in reply to james cummings

    Does the uninstallgui.exe process get created?  I guess this would be the first test.

    If you run Process Monitor, you should see the uninstallgui.exe process get created.  Does this happen?

    Regards,

    Jak

  • 0 in reply to jak

    just to update with no update.  No particularly impressed with the slowness of sophos support.  Seems to be they ask a question, you reply, then you have to wait almost a week for somebody to ask a similar question!  

Reply Children
Unfiltered HTML