This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Server couldn't protected in Sophos Central with Citrix MCS Maschines

Hi guys,

i have a serious problem. I have a Citrix Environment Version 7.15 Server 2008R2 and Sophos Intercept X running on it. Made a golden image with this article:

https://support.sophos.com/support/s/article/KB-000035040

I try the manual and also the script version. My cloned Servers shows up with the right name in Sophos Central, but all shows that the Server couldn't protected in Central.

When i click on the Sophos Client on the guest OS all is green, up and running.

What i also found is, that on all cloned Servers the registration.txt file is missing in

C:\ProgramData\Sophos\Management Communications System\Endpoint\Config

When i run the script manual, i see the file is created. After reboot the Server shortly shows the file and after a while the file is deleted automatically.

any idea?

hopefully

rené

This thread was automatically locked due to age.

Top Replies

Rene Pauly over 3 years ago in reply to FormerMember +1 verified

Morning! Yes all the servers are temporary, they restart ervery night and get the settings back from the disk from the golden image. but wait.. as i can see now, all the servers were green... OK…

Parents

0 Shweta over 3 years ago

Hi Rene Pauly

Have you edited the file registration.txt while preparing a gold image as mentioned in Step 10? If you double click on the endpoint --> About --> Open Endpoint Self help tool--> System Do you see anything under Endpoint ID and Computer Name?

Shweta

Community Support Engineer | Sophos Technical Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 Rene Pauly over 3 years ago in reply to Shweta

Hi Shweta,

thanks for your reply. Yes, i have to create the registration.txt file and put in the info (mcsclient and tokenid).

also i see in the info on the server and endpoint ID and computername.

i also see the info, that the windows update service is deactivated .. maybe this is the problem? if.. i think its pretty normal on Terminalservers to deactivate the windows update service.
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 3 years ago in reply to Rene Pauly

Do you have any script running that would touch that file? Perhaps something from your scrubbing the Gold image?
Cancel
Vote Up 0 Vote Down

Cancel
0 Rene Pauly over 3 years ago in reply to FormerMember

The only script which is running - is the goldenimageprep script from the article on the top.. as I say.. all clients seems to be ok.. also i can update them from the sophos central portal.. but all clients shows there as they couldn't be protected...
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Rene Pauly over 3 years ago in reply to FormerMember

The only script which is running - is the goldenimageprep script from the article on the top.. as I say.. all clients seems to be ok.. also i can update them from the sophos central portal.. but all clients shows there as they couldn't be protected...
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 FormerMember over 3 years ago in reply to Rene Pauly

That script does delete that file. To clarify - are you running these servers as temporary instances or are they persistent? If they are persistent, then they shouldn't need that script run on each shutdown.
Cancel
Vote Up 0 Vote Down

Cancel
+1 Rene Pauly over 3 years ago in reply to FormerMember

Morning!

Yes all the servers are temporary, they restart ervery night and get the settings back from the disk from the golden image.

but wait.. as i can see now, all the servers were green... OK... maybe it was only a time i have to wait?.. looks good, i will check today and if the green status exists, i wil close the thread.

thanks a log!
Cancel
Vote Up +1 Vote Down

Cancel