Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 14 subscribers
  • Views 8293 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to install sed64: general error.

Sophos User4398

I tried to update an old version of Sophos but it went wrong
In the console the following message is displayed Unable to install sed64: general error.
In the sophos client, I no longer have the settings menu and therefore I can no longer uninstall, the following message is displayed "Sophos Endpoint missing"
and in the log file I have this: Binaries copied successfully.
05/13/2021 13:42:25, INFO: Installing Sophos System Protection Service ...
05/13/2021 13:42:25, ERROR: Error code: 5
05/13/2021 13:42:25, ERROR: Error upgrading / downgrading Sophos Endpoint Defense: Failed to create Sophos System Protection Service service.
5/13/2021 1:42:25 PM, INFO: C: \ Program Files \ Sophos \ Endpoint Defense \ Pending has already been removed.
05/13/2021 13:42:25, INFO: Registered SED to be tamper protected.
05/13/2021 13:42:25, ERROR: SetupPlugin install error: Failed to upgrade / downgrade Sophos Endpoint Defense.


Can you help me?

Thanks



This thread was automatically locked due to age.
  • 0

    Is "sedenabled" under: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sophos Endpoint Defense\TamperProtection\Config" set to 1?

    If so, can you set it to 0 manually or do you get access denied?

    If so, that would suggest the "sophos endpoint defense" file system filter is loaded.  You can see this running fltmc.exe in an admin prompt.

    If this is the case, the options to disable it are:

    1. Does SEDCli.exe exist in C:\program files\sophos\endpoint defense\? If so, if you can get the password from Central, you can run in an admin prompt:

    sedcli.exe -tpoff <Pass>

    There is a report of deleted computers you can get password from if you have deleted the computer from Sophos Central.


    2. Use the steps here: Service and Support (sophos.com)  

    Once you have disabled SED, I would suggest running SophosZap, reboot run SophosZap.exe again and then reprotect the computer by running the installer.

    Article Detail (sophos.com)

    Hope it helps.

Unfiltered HTML