The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Deployment of a Sophos package from the Sophos Enterprise Console or manually running the setup.exe causes the msi to fail with the following error:
1327, Invalid Drive <driveletter>
First seen in Sophos Anti-Virus for Windows 2000+
The installer tries to access the network location to confirm it has the necessary rights. This issue occurs when the access attempt is performed as the computers SYSTEM account rather than a user account and the SYSTEM account does not have the necessary rights to the network location.
This can be caused when the folder redirection has been performed on the HKLM registry hive instead of the HKCU hive. Microsoft's KBA on folder redirection can be found here: http://support.microsoft.com/kb/242557.
Note that (as described in the above link) the modified hive should be HKCU. The HKLM hive should retain the default settings so that the SYSTEM account accesses it's local resources instead of attempting to access the network.
Before continuing read our warning on making changes to the registry.
You will need to make two changes:
By default the registry values under:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
The registry values under: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders all point to C:\Documents and Settings\All Users\ or %ALLUSERSPROFILE%\ at the beginning of the path.
C:\Documents and Settings\All Users\
Usually you will find that only a few of the keys under these locations have been modified, so a quick check of which keys have been edited and which keys have not will show which format to use. If unsure, compare against another machine.
Group Policy or a start-up script can be used to deploy the change across a wider scale.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.