Most likely Post WINDOWS Monthly Patch Installation, Sophos status is broken.
We started the Windows updates rollout this week and already have multiple devices with this issues now.
Ex- This device was all okay once the update was installed and rebooted Sophos events shows this error.
Anyone else with this problem?
Hi skyisbluescreen
Would you please suggest what is the exact error it is showing under the events?
Shweta
Hello there,
I have updated the Event log in the post. All the machines show the below error :
Everything was normal in these devices Sophos was working fine perfectly. However there was 1903 installed they rebooted and boom Sophos AV service goes missing and other ones too.
Hoping someone from the community can help me through.
------------------------------------------------------------------
I have tried Support:Here is what happens
SDU Logs shared for impacted PC's
Request us back to re install
We Do, and Still same problem.
We Report back, they connect and run a PS SCRIPT or BATCH to remove Sophos, Still issue persists after re install
Request to Re Install the OS
-------------------------------------
Have you tried removing the older version of Anti-virus present using the Sophos ZAP tool? Kindly PM me the case number that you have already registered, so that I can review a few logs.
Hello Shweta,
Thank you for your response, Will write to you in more details once we have the results on ZAP Tool.
Looking at the Events and logs it looks like the Monthly patches have caused this problem.
P.S-Updated the POST title to make it more relevant.
Once the system is patched with latest updates, let us know if you are still facing the issue with Sophos
The current patches (installed last week) will be there and we will not patch anytime soon in a months time.
Thank you for the update, let us know how it goes with Sophos ZAP tool.
We have this problem also for several Win10 machines. Solved by run update from Sophos Endpoint UI on "problematic" machines and by several restarts.
In "Sophos Central Console" are "device status" ok, but on some machines is the status Red - "you have to call IT .." (free translation from Czech language").
On fully updated machines and also on machines with some missing patches.
Hi Jiri Hadamek
Devices with red health status on central, does it show any specific service stopped or any other detections?
It haven´t service stopped. It simply haven´t service installed.
Now - after several restarts AND several "update NOW" from Sophos UI on PCs we have the following state:
In Sophos Control Central - OK
ALL Sophos services ARE running - OK
On workstation - Sophos show errors - see the attached pictures.
Could you please translate the error message shown in the Endpoint UI? Which service state is in the stopped state?
Translated freely into English " Some services aren´t started. Call IT" But ALL services ARE running. (After several restart and reinstall from LOCAL Sophos UI)
Can you please click on About > Open Endpoint Self Help Tool > Services and check which services are not running? Do you see any components which are not installed?
Thanks,
Yashraj Singha
Community Team Lead, Support & Services| Sophos Technical Support Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts If a post solves your question use the 'Verify Answer' button.