The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
The following error appears in the Sophos_Server32msi DATE TIME.log file:
MSI (s) (24:F0) [TIME]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI3AB.tmp, Entrypoint: CreateScheduledTask CreateScheduledTask: Initialized. CreateScheduledTask: Error 0x8007052e: Error encountered while creating scheduled task.CreateScheduledTask: Error 0x8007052e: Failed to create scheduled task. CustomAction CreateCDLTask returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox) MSI (s) (24:BC) [TIME]: User policy value 'DisableRollback' is 0 MSI (s) (24:BC) [TIME]: Machine policy value 'DisableRollback' is 0 Action ended TIME: InstallFinalize. Return value 3.
This error occurs when the Network access: Do not allow storage of credentials or .NET Passports for network authentication policy is enabled.
Applies to the following Sophos products and versions Enterprise Console 5.1.0
Disable the Network access: Do not allow storage of credentials or .NET Passports for network authentication policy on the affected computer.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.