"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
SafeGuard Enterprise events are not being deleted from the scheduled task even though the Task Scheduler 'Last Run Result' status is 'Success'.
Known to apply to the following Sophos product(s) and version(s) SafeGuard Management Center / Local Policy Editor 7.0
The service account being configured for the TaskScheduler Service should have "sufficient" SQL rights (as per KBA 113582, this is db_reader, db_writer and public).
In addition to this, the account requires 'execute' rights to the respective Database/ Stored Procedure. To grant permissions on a stored procedure, please do the following:
For further information, please refer to MS KBA Grant Permissions on a Stored Procedure.
IMPORTANT: Before performing any changes to the SafeGuard Database, always create a FULL database backup first.
For further information regarding event cleanup by script, please refer to section 33.13 (Scheduled event cleanup by script), page 263 of the SafeGuard Enterprise administrator help
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.