This knowledge base article provides information that applies to Sophos installations on either physical or virtual systems.
Applies from the following Sophos product(s) and version(s) Sophos Endpoint Security and Control
The following sections are covered:
You can perform customized installations of endpoint software (Sophos Anti-Virus, Sophos Remote Management System and Sophos Client Firewall) on Windows computers by running the setup.exe program from a command line. This allows you to deploy endpoint software to your network using a startup script and the installation method of your choice, as well as invoking some of the special features described below.
You can embed an installation of endpoint software on Windows computers by running the setup.exe program from a command line. This allows you to deploy to your network using a startup script. This will ensure that when you create a new virtual machine from the template library that it installs the specified anti-virus software, helping you ensure that all new virtual machines are properly protected.
By default, setup.exe is located in the root directory of each update location. From the Sophos Enterprise Console: \\servername\SophosUpdate\CIDs\Sxxx\SAVSCFXP.
Note: The setup.exe file version that comes with the standalone installer package of Sophos Endpoint Security and Control does not support extra parameters.
Installs Sophos Exploit Prevention
-mngcfg <RMS config path>
Specify a computer name to override the one used in Windows. This name will appear in Enterprise Console.
Specify a computer description to override the one used in Windows. This description will appear in Enterprise Console.
Specify a domain name to override that on the client. This name will appear in Enterprise Console/ Manager.
Specifies the group (set up in Enterprise Console/ Manager) to which the computer will belong. The path:
SETUP [-mng yes|no] [-scf] [-crt R] [-hmpa] [-updp <path>] [-user <username>] [-pwd <password>] [-mngcfg <RMS config path>] [-compname <computername>] [-compdesc <computerdescription>] [-domain <domainname>] [-G <groupname>] -s -ni -?
Setup.exe can return one of the following values:
If you run an unknown parameter, the following error message will be displayed:
Setup Could not find resource string 122 If you do not click 'OK', this message will close automatically after 60 seconds.
Setup.exe requires a directory named sau to exist in the same directory as itself. This directory must contain a valid Sophos AutoUpdate package including manifest.dat (required by setup.exe) and cidsync.upd (required by the AutoUpdate installation).
Setup.exe creates the file Sophos ES setup.log in the %TEMP% directory of each installed computer, where information and errors are logged. Information generated by the Windows Installer during the installation of AutoUpdate is also logged here. Each time setup is run, any previous log file is deleted.
Sophos ES setup.log
The following table shows a few examples on how to construct a command line installation of Sophos endpoint security software.
setup.exe -mng yes -scf -crt R -updp \\myServer\Sophos\CIDs\S000\savscfxp\ -ouser SIhvF6vRtcGyG0mpJWdvIAc= -opwd EIhvI6vRtcEyG0mpKWdvIAc= -s -ni
setup.exe -mng yes -scf -crt R -updp \\myServer\Sophos\CIDs\S000\savscfxp\ -ouser SIhvF6vRtcGyG0mpJWdvIAc= -opwd EIhvI6vRtcEyG0mpKWdvIAc= -s -ni -patch http://myServer/
setup.exe -mng yes -scf -crt R -hmpa -updp \\myServer\Sophos\CIDs\S000\savscfxp\ -ouser SIhvF6vRtcGyG0mpJWdvIAc= -opwd EIhvI6vRtcEyG0mpKWdvIAc= -s -ni -patch http://myServer/
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable for us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.