Problems installing Sophos Enterprise Console

Hello Peter,

and there was a SOPHOS service showing a status of Started

what's the exact name of this service?

What is the result of  osql -E -S .\SOPHOS -Q "SELECT Name FROM SYSDATABASES" (or the server name instead of .)? Also check the value HKLM\Software\Sophos\EE\Management Tools\\DatabaseConnectionMS (expected is Provider=SQLOLEDB;Integrated Security=SSPI;Initial Catalog=SOPHOS45;Data Source=server\SOPHOS;) and the keys HKLM\Software\Sophos\EE\Management Tools\Database Installer (should contain Instance SOPHOS) and HKLM\Software\Sophos\EE\Management Tools\DatabaseUser (usually blank values).

Christian

Hello Christian,

the service was MSSQL$SOPHOS.

When I rebooted the service didn't come back up again. i.e. it was "Stopped".

In the System Event Log I had ...

Source : Service Control Manager EventID 7024

Description : The SQL Server (Sophos) service terminated with service-specific error 1814 (0x716).

Anyway, I'll go and check out the things you asked about now and get back to you.

Thanks

              Peter

James, searching "the Net" for SQL error 1814 should give you some usable hints. Looks like an issue with the database (instance).

Christian

That osql statement returned "Server does not exist or access denied".

The DatabaseConnectionMS registry key was not there at all.

Nothing under HKLM/Software/Sophos/EE apart from Default and Install Status - 1.

Database instance is definitely not right. I'll go away and have a look for these 1814 errors.

Peter

I looked into this Service-specific 1814 error but couldn't make any sense of it. The messages seemed to suggest I had insufficient disk space which is not the case.

Can somebody advise me as to how to delete my "Server-name\SOPHOS" database instance ?

The installation has clearly failed and I am left with a MSSQL$SOPHOS service that won't start up and also an entry in the SQL Server Service Manager that will not start.

Attempting to re-run the Sophos Enterprise console.msi just repeats the failure to create the database.

If I could delete this rogue SOPHOS database and start again I might have a chance.

Thanks

               Peter

Hi,

I would suggest going in to add/remove programs and uninstalling SQLServer and reboot.

I would then probably go to MS and get the latest version of SQL Express 2008.

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=40acf55f-0715-4bb0-9735-d02fc2c8a7af&displaylang=en

Note: SQL Express 2008R2 would probaby be ok with SEC 4.5 but it's not supported until SEC 4.7 so I would suggest use SQL 2008 for now.

If you run through an install of SQL 2008, you can choose to show the advanced settings.  When you get to choose the instance name, it will default to SQLExpress, if you change this to SOPHOS, you should end up with a SOPHOS SQL instance.  If disk space is a problem you can select a different location for the data and log files during the insall. Ideally a different physical drive should be used for maximum performance.

Once you have a SOPHOS named instance you should be able to run the Sophos installer and it will use the SOPHOS instance by default.

Regards,

Jak

I have made a bit more progress on this now. I had to re-install the W2003 Server and put the Sophos database on before I installed some other applications which were obviously confusing the Sophos Endpoint Security and Control installer.

I now have installed the Enterprise Console 4.5 and identified the PCs in my network (using Active Directory).

As I may, or may not have mentioned before my network is not on the Internet so I had to find a machine that was and obtain my CIDs and Warehouse directories. These have now been copied into my SophosUpdateManager share.

I've updated the UpdateManager and that is now showing Download Status = Last checked at (today's date/time) and Configuration=Matches.

In my View / Bootstrap locations I have an entry for ".........\S000\SAVSCFXP" "Windows 2000 and above" "Version 9.5.5.464".

Now (at last) my question :

I don't have Sophos Anti-Virus application running on my W2003 Server yet. i.e. No Sophos shield in the system tray and no Service listed in the "services.msc".

In Enterprise Console / Endpoint screen the "Up to date" and "On Access" Status of the W2003 Server  are still both blank.

I have obviously forgotten to do something. Can somebody remind me what the next step is please ?

Once I've got Sophos Anti-Virus application running on the W2003 Server I will be ready to "Protect" the other computers in the network.

Thanks

             Peter

Hello Peter,

you install SAV on your server using Protect Computers (be prepared that you will likely have to reboot the server after the install). Note that while the SEC/SUM component and the client (SESC) component are not independent (as they "share" for example RMS) installing SEC does not install SAV (SESC) on the server.  

Christian

Hello Christian,

the "Protect Computers" option is only available for the other PCs in the Network. On the Server where I have installed Enterprise Console that "Protect Computers" option is greyed out.

Can I just manually run the "setup.exe" which I noticed under the CIDs folder  to get Sophos Anti-Virus installed ?

Or is there something else I need to do to un-grey the "Protect Computers" option ?

Thanks

               Peter

Is the server already in a custom group or still in Unassigned?

Christian