Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 16 subscribers
  • Views 16906 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Office 2010 Activation lost with Sophos Endpoint installed

benny4982

We have a strange behavior on a customer environment.
All Devices are on Windows 1709. (Already tried Windows 1809 on some endpoints)

Time after time the office activation get's lost on different endpoints

We tried MAK and KMS activation, same behavior.
After trying nearly everything you could imagine :) we finally uninstalled (not only deactivated) Sophos Endpoint Advanced and Intercept X.
After uninstall of sophos and reboot, the activation succeeds immediatelly.

We have no errors in the management console.

BR

Benny



This thread was automatically locked due to age.
  • 0 in reply to Barb@Sophos

    Hi, Case 30259696 open un SophosServ

     

    Details:

    Office2010 randomly is unable to activate licence when InterceptX is deployed with  "Protect office applications" setting

    When it happens we need to change this setting and reboot the affected computer

    If we tray to activate office manually with ospp.vbs tool we receive an 0x80070426 error

    We have checked that "Office Software Protection Platform" service is running when we execute ospp.vbs


    Additional Information:
    - Office 2010 Spanish 32 bit
    - Windows 10 1709 64 bit
    - SAP EPM add-in for Microsoft Office deployed

    - No RCA details in Sophos Central
    - No alerts in Sophos Central
    - No Alerts in Sophos Self Service

  • 0 in reply to Juan Francisco Arrabe

    Hello Juan Francisco Arrabe ,

    Thank you for ticket number. It is currently waiting assignment. An engineer will contact you as soon as they become available.
    If possible, please include  the SDU logs

    Regards,

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • 0

    "After install sophos endpoint central"

    We are also seeing this same issue on many my customers.

    This issue found only computer which used ms office 2010.

    Pls help us.

  • 0 in reply to Thawatchai Chanlo

    Hi Thawatchai Chanlo ,

    I would recommend to file a case with support  for further investigation. Please include a copy of the SDU logs so that they can analyze them. 

    Please, send me a message with the case number once you received it, so that I can follow-up. 

    Regards,

    Barb@Sophos
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

     

  • 0

    I'm seeing this in a customer we support on multiple systems. First it was disabling HIPS through the threat protection policy, then de-selecting the "protect office applications" for some other machines. I had a ticket open with Sophos but they're last suggestion was if the issue came back up to run proc mon at boot to see if something is getting held up, but they saw the issue. 

    Customer had an issue this morning with 5 endpoints, tried other adjustments like clearing the cache and attempting reactivation of office and that seemed to work. Now I guess we have to wait a few days to see if the issue pops back up to continue troubleshooting.

    The good news is that the tech did see that Sophos seemed to be blocking it as we tested with multiple policies, the bad news is the issue went away and excel authenticated and couldn't get logs at the time. I really wish going forward IF Sophos was blocking traffic or delaying it that there would be an alert or log that would show it...

Unfiltered HTML