The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article is to confirm that we do not support any of the following actions when the Sophos Management Server/Enterprise Console is installed.
Applies to the following Sophos product(s) and version(s) Enterprise Console
The only supported methods are:
Multiple errors and problem may occur and we are unable to support installations that have been subject to the actions listed above.
During the installation of the Sophos Management Server/Enterprise Console domain names and computer hostnames are hard-coded into the Windows registry, local configuration files and the Sophos databases. Furthermore promoting a computer to a DC or demoting a DC changes account security identifiers.
Almost all registry information has to be removed before reinstalling. However if you preserve the 'CertAuthStor' key the management server will keep the same certificates that currently installed endpoints are using. Therefore the high-level steps are:
The restored databases will have the previous configuration contained in them and hence you will experience problems if this information is not changed. It is not easy to reconfigure them for continued use. Therefore we would strongly recommend you do not restored your databases.
If it is important for you to continue using the previous database you will have to contact us. We will need to know what changes have been made and the names of computers/domains/etc. before and after the change. Plus where the management server was installed (DC or member server), etc.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.