Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 2266 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

2 Problems. Install Error with Console. Password error with standalone.

LeighAnne

Part 1

I have never been able to get Sophos schedule tasks from the Enterprise Console (4.5.1.0).  The OS is Windows server 2008R2 64bit Enterprise.  I get the error “0000003a Installation involves creating a scheduled task on the computer. Access was denied when creating this task. The default admin share (called c$) may not be accessible or a required service may not be running.”

I verified the requirements as the services that should be running, file sharing, permissions etc. I can find anything that would be keeping the agent from having permission to install.

We have since began a reinstall on the server and will do a clean install of Sophos. 

Any clues on how to get the console up and running after the install???

ALSO

Part 2

In the meantime while the Console is out of commission I thought I would install the stand alone program to my pc.

I was able to install it, get it to update and get it to scan.

When I try to schedule a scan I get the password error.

            “Incorrect password or the password does not adhere to security policy.

            Please try again.”

I have verified the local account.

I have verified Task Schedule is running.

I created a ‘‘‘‘dummy’’’’ local account on the pc and tried it resulting in the same message.

I am in the Sophos Administrator Group.

I am able to schedule custom tasks with the task scheduler.  I checked because it appears it is still a problem scheduling task.  Does Sophos have a known issue with the Windows Task Scheduler?

I am so frustrated at this point - I can't seem to get it to work properly. I need to provide protection to about 150 PC's on staff computers on a  college campus.  New to the position and new to Sophos.

Any help with either of these two issues will be greatly appreciated

Leigh Anne

:7047


This thread was automatically locked due to age.
  • 0

    Hi,

    So SEC is installed on the 2k8r2 machine, what OS are you protecting?  Windows7?

    When you are going through the deployment wizard, what account are you using?  I assume this is an account which is a domain administrator and that the Domain Administrators group is a member of the local administrators group on the target machine?

    If you're logged on to the SEC server as a different account as the one you are entering in to the deployment wizard, I would suggest logging on to the SEC server as the deployment account and confirm you can:

    Access \\[remoteclient]\C$

    If you open up Regedit, use the connect to remote registry feature and connect to the client.

    Access \\[remoteclient]\C$\Windows\Tasks\

    and create a test one manually.

    It also seems very odd and possibly the root of the problem you can't create a local scheduled scan on your machine.

    I would be tempted to run:

    rsop.msc

    an see if a policy has been set in this area.

    gpresult /Z > gp.txt

    might also provide an output you can search within more easily to try and find a policy that might be set.

    I would also suggest maybe attempting to create a scheduled task in SAV whilst running Process Monitor (http://live.sysinternals.com/Procmon.exe) on your machine as a test.  You should see savmain, savservice and svchost performing tasks on the job file.  Do you notice any access denied entries, etc..?

    08:20:11.3187352 SavMain.exe 6296 CreateFile C:\Windows\Tasks\test.job

    08:20:11.3327721 SavService.exe 1160 CreateFile C:\Windows\Tasks\test.job

    08:20:11.3368534 svchost.exe 408 CreateFile C:\Windows\Tasks\test.job

    If you're still struggling to get the console to create the task to kick off setup on the clients.  You could always look to create a startup script to do it as per something like:

    http://www.sophos.com/support/knowledgebase/article/13090.html

    Also:

    http://www.sophos.com/support/knowledgebase/article/12570.html

    will be useful.

    Jak

    :7055
  • 0

    Thank you so much for your reply.

    I am running Server2008r2 and we have XP and 7 systems.

    I am using a Domain Admin account (which is granted local admin rights).  I am able to access the target machines c$ and remote registry to them as well.

    I have found a GP item that may be blocking access after trying your RSOP suggestion.  I had done that before but I over looked an item. 

    Thanks again and I will post back.

    Leigh Anne

    :7111
  • 0

    There was a GPO to prevent write to the task folder.  This was added sometime in the past to fight conficker from what I have found out.  I left the policy but added Sophos Administrator and granted full access.  I was able to schedule a scan on my machine.  Now - I will reinstall the console on the upgraded server and proceed.  I'm pretty sure that was the problem all along!

    From what I can tell the organization hasn't had full virus scans in over a year.

    Thank you so much for your help!

    :7115
Unfiltered HTML