Windows 10 BSOD

Question

Hi, 
 Signed up for a trial of Sophos Endpoint Cloud and installed onto my home Windows 10 Pro PC. After the first reboot, it would always BSOD just before it would show the login screen. The only way to stop this happening was disable the Hitman Pro service. The BSOD would show memory management as the error. 
 My PC comes up clean with other AV scans. Some other employees have installed it without problems and i'm going to try on my laptop later. 
 Wanted to flag this in case anyone else came across the problem. I haven't found out the reason for it but i haven't had a chance to look at the memory dump yet.

Aditya Patel · Answer

HI All, 
 Seems the issue is occurred with the new Windows update Aniversary Edition 10 as they have added Digital Driver Verification check. It may such instance is added and would be rectified . But till then we have a workaround to disable such feature by following the Steps . 
 On installation a number of messages appear on the Desktop advising ' A digitally signed driver is required '. The following drivers may be reported: 
 
 SNTP Driver 
 HitmanPro.Alert Support Driver 
 Sophos Endpoint Defense Driver 
 
 This issue occurs on new installations of Windows Anniversary edition (version 1607) only, when Secure Boot is also enabled. 
 To resolve, choose one of the following options: 
 
 Disable Secure Boot as detailed in the following Microsoft article: https://technet.microsoft.com/en-us/library/dn481258.aspx Note: This will permanently disable the functionality. You may want to re-enable this functionality following the installation. 
 Change the startup settings: 
 
 Press and hold the Shift key on your keyboard and click the Restart button. 
 Choose Troubleshoot > Advanced options > Startup Settings and click the Restart button. 
 When your computer restarts you&rsquo;ll see a list of options. Press F7 on your keyboard to select Disable driver signature enforcement . 
 Your computer will now restart and you&rsquo;ll be able to install unsigned drivers. Note: This method temporarily disables driver signing enforcement so be sure to run the installation as soon as possible.

Use Command prompt: 
 
 Press Windows Key + X to open Power User Menu. Select Command Prompt (Admin) from the menu. 
 Type the following command then press Enter : bcdedit.exe /set nointegritychecks on Note: This disables driver signature enforcement permanently. 
 To enable driver signature enforcement , open the Command Prompt as administrator, type the following command and press Enter : bcdedit.exe /set nointegritychecks off

After applying the workaround: 
 
 Double click the Sophos Endpoint icon to open the interface 
 Click the About link in the bottom right hand corner 
 Click Update Now to trigger an update and complete the installation 
 
 Let us know if you face the issue after the BUG Fix WINEP 6071. 
 Thanks and regards 
 Aditya Patel

Aditya Patel · Answer

HI AlexRomp, 
 Nothing is permanent when you deal is computers and Network :) .We have provided a Work-around on this issue and Should be resolved with the next Windows Update . Furthermore if it did not work out we have a Bug mentioned and Is going to be fix soon. 
 Thanks and Regards 
 Aditya Patel

Aditya Patel · Answer

HI Alex , 
 It is actually a bug introduced in Win10 AU with Hyper-V enabled, and this bug in Win 10 AU is already fixed by Microsoft in Insider builds, You may upgrade your windows to the latest build and check my turning on the Driver Signature . 
 Thanks and regards 
 Aditya Patel