Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 21252 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoint Agent Installation

Denys Plamondon

Hey Everyone,

We are migrating from an on-premise Central Console to the Sophos cloud one. Forgive me if this is the wrong forum, but I didn't see one specific to the central sophos console. 

 

We have a number of clients who return an error code of 145 when deploying the stub install (sophosinstall.exe). I looked in the following KB https://community.sophos.com/kb/en-us/120449, which doesn't have an entry for 145. I was hoping somebody has seen this before and can point me in the right direction. 

 

Thanks in advance. 

 



This thread was automatically locked due to age.
  • +1

    Hi Denys,

    The following information should help you with this scenario:

    1. Check that the account the user is logged on to the computer as is a member of the Sophos Administrators Group.

    2. Click Start > Control Panel > Administrative Tools > Computer Management > Local Users and Groups > Groups. Double Click on the SophosAdministartor Group and check to see if you are a member (User you are installing the software as), if not click on the ADD button, type in your account name, click on "Check Names" a line will appear under the account name, then click ok.

    3. The account should now be added to the SophosAdministator Group.

    4. Log off the computer and log back on.

    5. Run the installer and this should now install for you.

    Let me know if this helps resolve your issue.

    Haridoss Sreenivasan
    Technical Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0

    Hello Denys Plamondon,

    specific to the central sophos console
    IMO Central/Central is better than ESC/Endpoint - even as this is an endpoint related question [:)]
    The Bootstrap log should report some error before the final 145. Here's an example taken from a thread in Home:
    Information,Remove old SAV...,
    Information,Uninstallation of Sophos Anti-Virus returned exitcode: 1603,
    ERROR,The uninstallation of Sophos Anti-Virus failed. Installation of Sophos Home has failed.,
    More information should then be in the associated Uninstall or, in case of SAV, CustomActions log in %windir%\Temp.

    Christian

  • +1

    We have this issue. 

     

    We script our installs via PDQ Deploy. We have a script that completely blows Sophos away, take a look below:

    net stop "Sophos Anti-Virus"
    net stop "Sophos AutoUpdate Service"
    net stop "Sophos Anti-Virus"
    net stop "Sophos AutoUpdate Service"
    net stop "Sophos Agent"
    net stop "SAVAdminService"
    net stop "SAVService"
    net stop "Sophos Message Router"
    net stop "Sophos Web Control Service"
    net stop "Sophos Patch Agent"
    net stop "swi_update"
    net stop "swi_service"
    net stop "Sophos System Protection Service"
    net stop "Sophos Network Threat Protection"
    net stop "Sophos MCS Client"
    net stop "Sophos MCS Agent"
    net stop "Sophos MCS Heartbeat"
    net stop "Sophos Health Service"

    "C:\program files\Sophos\Sophos Endpoint Agent\uninstallcli.exe"

    :Sophos Compliance Agent
    MsiExec.exe /qn /norestart /X{486feabf-70eb-48c1-9c35-700b74a8ebe6}

    :rem Sophos Patch Agent
    MsiExec.exe /qn /norestart /X{2FB80981-C6B6-4FCA-BC65-24437DF4C8CB}
    MsiExec.exe /qn /norestart /X{29006785-9EF7-4E84-ABE8-6244D12E7909}
    MsiExec.exe /qn /norestart /X{391530cf-3500-404d-867c-42514304917a}

    :Sophos Client Firewall
    MsiExec.exe /qn /norestart /X{12C00299-B8B4-40D3-9663-66ABEA3198AB}

    :Sophos AutoUpdate
    MsiExec.exe /qn /X{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{BCF53039-A7FC-4C79-A3E3-437AE28FD918} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{9D1B8594-5DD2-4CDC-A5BD-98E7E9D75520} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} REBOOT=ReallySuppress

    :Sophos Antivirus
    MsiExec.exe /qn /X{8123193C-9000-4EEB-B28A-E74E779759FA} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{36333618-1CE1-4EF2-8FFD-7F17394891CE} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{DFDA2077-95D0-4C5F-ACE7-41DA16639255} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{CA3CE456-B2D9-4812-8C69-17D6980432EF} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{3B998572-90A5-4D61-9022-00B288DD755D} REBOOT=ReallySuppress

    :Sophos System Protection
    MsiExec.exe /qn /X{934BEF80-B9D1-4A86-8B42-D8A6716A8D27} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6} REBOOT=ReallySuppress

    :Sophos Network Threat Protection
    MsiExec.exe /qn /X{66967E5F-43E8-4402-87A4-04685EE5C2CB} REBOOT=ReallySuppress

    :Sophos Health
    MsiExec.exe /qn /X{A5CCEEF1-B6A7-4EB4-A826-267996A62A9E} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{D5BC54B8-1DA1-44F4-AE6F-86E05CDB0B44} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{E44AF5E6-7D11-4BDF-BEA8-AA7AE5FE6745} REBOOT=ReallySuppress

    :Sophos Diagnostic Utility
    MsiExec.exe /qn /X{4627F5A1-E85A-4394-9DB3-875DF83AF6C2} REBOOT=ReallySuppress

    :Sophos Heartbeat
    MsiExec.exe /qn /X{DFFA9361-3625-4219-82C2-9EF011E433B1} REBOOT=ReallySuppress

    :Sophos Management
    MsiExec.exe /qn /X{A1DC5EF8-DD20-45E8-ABBD-F529A24D477B} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{D875F30C-B469-4998-9A08-FE145DD5DC1A} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{2C14E1A2-C4EB-466E-8374-81286D723D3A} REBOOT=ReallySuppress

    :UI
    MsiExec.exe /qn /X{D29542AE-287C-42E4-AB28-3858E13C1A3E} REBOOT=ReallySuppress
    :SophosClean
    "C:\Program Files\Sophos\Clean\uninstall.exe"
    :SED
    "C:\Program Files\Sophos\Endpoint Defense\uninstall.exe" /quiet
    :HMPA (managed) 3.5.3.563
    "C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe" /uninstall /quiet
    :HMPA 1.0.0.699
    "C:\Program Files (x86)\HitmanPro.Alert\uninstall.exe" /uninstall /quiet
    :HMPA 3.7.14.265
    "C:\Program Files\HitmanPro\HitmanPro.exe" /uninstall /quiet

    "C:\program files\Sophos\Sophos Endpoint Agent\uninstallcli.exe"
    :Sophos AutoUpdate
    MsiExec.exe /qn /X{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{BCF53039-A7FC-4C79-A3E3-437AE28FD918} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{9D1B8594-5DD2-4CDC-A5BD-98E7E9D75520} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} REBOOT=ReallySuppress
    :Sophos Anti-Virus (Endpoint)
    MsiExec.exe /qn /X{8123193C-9000-4EEB-B28A-E74E779759FA} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{36333618-1CE1-4EF2-8FFD-7F17394891CE} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{DFDA2077-95D0-4C5F-ACE7-41DA16639255} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{CA3CE456-B2D9-4812-8C69-17D6980432EF} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{3B998572-90A5-4D61-9022-00B288DD755D} REBOOT=ReallySuppress
    :Sophos Anti-Virus (Server)
    MsiExec.exe /qn /X{72E30858-FC95-4C87-A697-670081EBF065} REBOOT=ReallySuppress
    :Sophos System Protection
    MsiExec.exe /qn /X{934BEF80-B9D1-4A86-8B42-D8A6716A8D27} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6} REBOOT=ReallySuppress
    :Sophos Network Threat Protection
    MsiExec.exe /qn /X{66967E5F-43E8-4402-87A4-04685EE5C2CB} REBOOT=ReallySuppress
    :Sophos Health
    MsiExec.exe /qn /X{A5CCEEF1-B6A7-4EB4-A826-267996A62A9E} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{D5BC54B8-1DA1-44F4-AE6F-86E05CDB0B44} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{E44AF5E6-7D11-4BDF-BEA8-AA7AE5FE6745} REBOOT=ReallySuppress
    :SDU (1.x)
    MsiExec.exe /qn /X{4627F5A1-E85A-4394-9DB3-875DF83AF6C2} REBOOT=ReallySuppress
    :Heartbeat
    MsiExec.exe /qn /X{DFFA9361-3625-4219-82C2-9EF011E433B1} REBOOT=ReallySuppress
    :Sophos Management Communications System
    MsiExec.exe /qn /X{A1DC5EF8-DD20-45E8-ABBD-F529A24D477B} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{D875F30C-B469-4998-9A08-FE145DD5DC1A} REBOOT=ReallySuppress
    MsiExec.exe /qn /X{2C14E1A2-C4EB-466E-8374-81286D723D3A} REBOOT=ReallySuppress
    :UI
    MsiExec.exe /qn /X{D29542AE-287C-42E4-AB28-3858E13C1A3E} REBOOT=ReallySuppress
    :SophosClean
    "C:\Program Files\Sophos\Clean\uninstall.exe"
    :SED
    "C:\Program Files\Sophos\Endpoint Defense\uninstall.exe" /quiet
    :HMPA (managed) 3.5.3.563
    "C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe" /uninstall /quiet
    :HMPA 1.0.0.699
    "C:\Program Files (x86)\HitmanPro.Alert\uninstall.exe" /uninstall /quiet
    :HMPA 3.7.14.265
    "C:\Program Files\HitmanPro\HitmanPro.exe" /uninstall /quiet

    rem Deleting Files rem
    reg delete "HKLM/Software/Sophos" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos" /f
    reg delete "HKCU/Software/Sophos" /f
    reg delete "HKEY_CLASSES_ROOT\Installer\Products\{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}" /f
    reg delete "HKEY_CLASSES_ROOT\Installer\Products\{D924231F-D02D-4E0B-B511-CC4A0E3ED547}" /f
    reg delete "HKEY_CLASSES_ROOT\Installer\Products\{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16}" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16}" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D924231F-D02D-4E0B-B511-CC4A0E3ED547}" /f
    reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4320988A-7DE0-478D-A38B-CE9509BCE320}" /f
    reg delete "HKLM/System/CurrentControlSet/Services/Interchk" /f
    reg delete "HKLM/System/CurrentControlSet/Services/SAV" /f
    reg delete "HKLM/System/CurrentControlSet/Services/Sophos" /f
    reg delete "HKLM/System/CurrentControlSet/Services/Sweep" /f
    DEL /F /S /Q /A "%allusersprofile%\Sophos"
    DEL /F /S /Q /A "C:\Program Files\Sophos"
    DEL /F /S /Q /A "C:\Program Files (X86)\Sophos"
    rd "%allusersprofile%\Sophos" /s /q
    rd "C:\Program Files\Sophos" /s /q
    rd "C:\Program Files (X86)\Sophos" /s /q
    rd "C:\Programdata\Sophos" /s /q
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2E75E9D9-62EE-4E63-8859-75FA0DD2B65C}" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{788a31a2-9d77-4994-a1c5-6c3036f56141}" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6C44AB65-918A-483C-9AF5-83D71D78A8B2}" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Sophos" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\56BA44C6A819C384A95F387DD1878A2B" /f
    reg delete "HKEY_CLASSES_ROOT\Installer\Features\56BA44C6A819C384A95F387DD1878A2B" /f
    reg delete "HKEY_CLASSES_ROOT\Installer\Products\56BA44C6A819C384A95F387DD1878A2B" /f
    reg delete "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\E932B7952303A1943A2218777329E5A8" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\E932B7952303A1943A2218777329E5A8" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\005DC63DEBF4349409CE7D46A64A5191" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01BDFF90F4169984288E587A8DFB3AA2" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01E37EB26B46ABF4389B7FAC14B627F9" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02FE2E0C0D6B7A4488DAADAF4A3A52FB" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05711425E3707D74BB79B804A44FB267" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05AA3B11EDB1FA248A14C142A948A813" /f
    reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\09DA304F7CEF6304C9A1BB10A2E897E0" /f

  • 0 in reply to JamiePassalacqua

    Thanks guys! Both of your posts were very helpful.

Unfiltered HTML