Unable to install agent Sophos Central in Windows Server 2008 Service Pack 2 - The Setup doesn't start.

Can you run Process Monitor when you run it to gain any insight?

Hello Jak,

Yes, i tried it but nothing.

I'm not sure you have the correct tool.  I was referring to:

https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

Have you ensured the computer is fully up to date with patches seeing as it's 2008 Server.  If I had to guess I suspect it's a root certificate update that is required.  Something along those lines.

Regards,

Jak

Hi Jak,

I'm understand but i don't have that tool installed in that server.

P.S: doesn't reflect information about it.

Thanks for your help.

Kind regards,

Manuel.

Procmon will help to narrow down what is happening in the background when you click on the installer.

But first, I am curious and I think it would help, can you install and exe? Maybe there is a application you know is safe that has an exe installer and you can install and uninstall it just to check.  It would be nice to determine if it is specifically related to sophos or something else.

Procmon will help to narrow down what is happening in the background when you click on the installer.

But first, I am curious and I think it would help, can you install and exe? Maybe there is a application you know is safe that has an exe installer and you can install and uninstall it just to check.  It would be nice to determine if it is specifically related to sophos or something else.

Also, are you using a local admin or domain admin or a user account belonging to domain or local admins?  

And 

One more thought, have you tried running SFC /SCANNOW to see if any Window System files have become corrupted?  

I've updated my previous comment to suggest ensuring the computer is fully up to date with Windows Updates.  In particular ensure any root certs have been updated.

Hi Badrobot,

I installed Procmon in that server and this was found:

I am installing the Setup with a domain user member of the administrator group.

The server needs to be updated, they has not noticed.

Will that be the inconvenience?

Hello Manuel Linares,

Updates were installed: Never and 203 important updates available
It's a good idea to install them.

Nevertheless, Process Monitor's output seems strange. Why should SophosSetup.exe look for msjava.dll (that's not present) or try to find Flash?
Unfortunately the screenshot doesn't tell much. Just some arbitrary events out of 60,000. Paths are truncated (it would be interesting what all these pointing to your %Temp% directory are. In case of a process that seemingly doesn't run the events around the attempted start are necessary. Apparently it does run but does some weird things and then stops. Usually in such cases one has to start with all events from start to end and work through the chaff to find those areas that contain interesting and important information.

Christian     

Manuel, have you tried creating an official support case with Sophos on this issue?  You can initiate that from the Help menu when logged into Sophos Central.

Hi Brucek,

Yes, I have already opened the case with Sophos and I am waiting for your response.

Thanks for your help.

It is more than likely due to the pending updates.

I'm pretty certain it will be fixed by the Windows updates.  I assume that will update the certificates and it will run.

Hello Jak,

All the pending updates were installed but despite this, the incident was still present.

We proceeded to raise the case with Sophos directly and told us that it is an issue with Server 2008 - Non R2 systems, this OS is treated as a Legacy OS in regards to the Sophos installation package. I was informed that they are preparing a KB with the instructions to solve the problem in the future.

Thanks for your support.

Kind regards.