Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 2491 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Please give suggestions

anakinmorgan

I hope this is the correct board to dicuss my issue.

When i have imaged a machine on the network, sophos will pick it up in unmanged but will have a error saying

"Enterprise Console: error a0490003 Error a0490003 may be displayed in Enterprise Console. The full text is: Error: a0490003 Attempt to access the on-access driver by unprivileged user (%1) was denied."

This happens for all of the machines i reimage and Sophos website is not clear of what is going on.

Many thanks

Steve

:4638


This thread was automatically locked due to age.
  • 0

    Hello Steve,

    this is the correct board :smileyhappy:.

    Have you read incorporating Sophos Anti-Virus current versions in a disk image? I assume you installed Sophos on the template computer and changed the SID during the imaging process. You should follow the steps given in the article.

    HTH

    Christian

    :4639
  • 0

    Many thanks for the link i have read it before and even wondered if i should just have removed sophos then sysprep it then upload it and send it out to all the computers then do a push of the Sophos software out.

    I will do this but in the mean time do you know how to fix this issue with all the errors i have?

    :4640
  • 0

    Hi,

    Ensure SYSTEM is a member of the SophosAdministrator group and if you open up machine.xml (C:\ProgramData\Sophos\Sophos Anti-Virus\Config), do the SID values match up with the current SID values for the 3 Sophos groups?

    Thanks,

    Jak

    :4645
  • 0

    Its funny how i have rebuilt using an older build and this is fine with no errors in sophos.

    Go figure!

    So something must have happened to the new build in order to throw errors and to denie access.

    I am not sure how this is possible but looks like i will have to go with older builds and then update them all.

    Bummer!

    Thanks

    :4653
  • 0

    Ok looks like this is a batch script to place in the sysprep file.

    net stop "Sophos Anti-Virus"
    net stop "Sophos Anti-virus Status Reporter"
    net stop "Sophos Message Router"
    net stop "Sophos Agent"
    net stop "Sophos AutoUpdate Agent"
    net stop "Sophos AutoUpdate Service"

    reg delete "HKLM\Software\Sophos\ALC Agent\Private" /v pkc /f
    reg delete "HKLM\Software\Sophos\ALC Agent\Private" /v pkp /f
    reg delete "HKLM\Software\Sophos\Messaging System\Router\Private" /v pkc /f
    reg delete "HKLM\Software\Sophos\Messaging System\Router\Private" /v pkp /f
    reg delete "hklm\Software\Sophos\Remote Management System\ManagementAgent\Private" /v pkc /f
    reg delete "hklm\Software\Sophos\Remote Management System\ManagementAgent\Private" /v pkp /f
    del "c:\Program Files\Sophos\Sophos Anti-Virus\cidsync.upd"

    Can anyone advise if this is ok to use or does the sophos website offer any other info

    Thanks

    :4655
Unfiltered HTML