Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 1 subscriber
  • Views 6187 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

The attempt to delete the infected file "X" failed. The user does not have the rights...

JohnH

Hi all,

We are getting the following message more and more often:

The attempt to delete the infected file "X" failed.  The user does not have the rights to perform the action on the infected file

When I 'click -through' to the Sophos site it states that the Sophos Anti-Virus service should be run using an Administrator account.  When I checked, the service uses NT AUTHORITY\LocalService.  Is this the correct account or do we have an installation problem?

Thanks,

John

:384


This thread was automatically locked due to age.
Parents
  • 0

    Paul,

    The URL of the page that states that the account should be an adminstrator account is http://www.sophos.com/support/knowledgebase/article/17514.html

    All of the other Sophos services installed run under the LocalSystem account but for some reason the Sophos Anti-Virus service is using the NT AUTHORITY\LocalService account.  We are using the following command to install Sophos onto our workstations:

    "\\pbravs01\SophosUpdate\CIDs\S000\SAVSCFXP\Setup.exe" -mng yes -user "pbravs01\sophosupdatemgr" -pwd "xxxxxx" -ni

    We are using Sophos v7.6.15 on the workstations (We can't use v9 at the moment due to a conflict with another piece of software)

    The message is comming up on some machine as soon as they are started so assume it is the On Access scanner that is generating this message.

    Hope this extra information helps narrow down the problem.  Feel free to ask for more! :)

    John

    :473
Reply
  • 0

    Paul,

    The URL of the page that states that the account should be an adminstrator account is http://www.sophos.com/support/knowledgebase/article/17514.html

    All of the other Sophos services installed run under the LocalSystem account but for some reason the Sophos Anti-Virus service is using the NT AUTHORITY\LocalService account.  We are using the following command to install Sophos onto our workstations:

    "\\pbravs01\SophosUpdate\CIDs\S000\SAVSCFXP\Setup.exe" -mng yes -user "pbravs01\sophosupdatemgr" -pwd "xxxxxx" -ni

    We are using Sophos v7.6.15 on the workstations (We can't use v9 at the moment due to a conflict with another piece of software)

    The message is comming up on some machine as soon as they are started so assume it is the On Access scanner that is generating this message.

    Hope this extra information helps narrow down the problem.  Feel free to ask for more! :)

    John

    :473
Children
No Data
Unfiltered HTML