Endpoint Agent Installation

Question

Hey Everyone, 
 We are migrating from an on-premise Central Console to the Sophos cloud one. Forgive me if this is the wrong forum, but I didn't see one specific to the central sophos console. 
 
 We have a number of clients who return an error code of 145 when deploying the stub install (sophosinstall.exe). I looked in the following KB https://community.sophos.com/kb/en-us/120449, which doesn't have an entry for 145. I was hoping somebody has seen this before and can point me in the right direction. 
 
 Thanks in advance.

Haridoss Sreenivasan · Accepted Answer

Hi Denys, 
 The following information should help you with this scenario: 
 1. Check that the account the user is logged on to the computer as is a member of the Sophos Administrators Group. 
 2. Click Start > Control Panel > Administrative Tools > Computer Management > Local Users and Groups > Groups. Double Click on the SophosAdministartor Group and check to see if you are a member (User you are installing the software as), if not click on the ADD button, type in your account name, click on "Check Names" a line will appear under the account name, then click ok. 
 3. The account should now be added to the SophosAdministator Group. 
 4. Log off the computer and log back on. 
 5. Run the installer and this should now install for you. 
 Let me know if this helps resolve your issue.

JamiePassalacqua · Answer

We have this issue. 
 
 We script our installs via PDQ Deploy. We have a script that completely blows Sophos away, take a look below: 
 net stop "Sophos Anti-Virus" net stop "Sophos AutoUpdate Service" net stop "Sophos Anti-Virus" net stop "Sophos AutoUpdate Service" net stop "Sophos Agent" net stop "SAVAdminService" net stop "SAVService" net stop "Sophos Message Router" net stop "Sophos Web Control Service" net stop "Sophos Patch Agent" net stop "swi_update" net stop "swi_service" net stop "Sophos System Protection Service" net stop "Sophos Network Threat Protection" net stop "Sophos MCS Client" net stop "Sophos MCS Agent" net stop "Sophos MCS Heartbeat" net stop "Sophos Health Service" 
 "C:\program files\Sophos\Sophos Endpoint Agent\uninstallcli.exe" 
 :Sophos Compliance Agent MsiExec.exe /qn /norestart /X{486feabf-70eb-48c1-9c35-700b74a8ebe6} 
 :rem Sophos Patch Agent MsiExec.exe /qn /norestart /X{2FB80981-C6B6-4FCA-BC65-24437DF4C8CB} MsiExec.exe /qn /norestart /X{29006785-9EF7-4E84-ABE8-6244D12E7909} MsiExec.exe /qn /norestart /X{391530cf-3500-404d-867c-42514304917a} 
 :Sophos Client Firewall MsiExec.exe /qn /norestart /X{12C00299-B8B4-40D3-9663-66ABEA3198AB} 
 :Sophos AutoUpdate MsiExec.exe /qn /X{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16} REBOOT=ReallySuppress MsiExec.exe /qn /X{BCF53039-A7FC-4C79-A3E3-437AE28FD918} REBOOT=ReallySuppress MsiExec.exe /qn /X{9D1B8594-5DD2-4CDC-A5BD-98E7E9D75520} REBOOT=ReallySuppress MsiExec.exe /qn /X{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54} REBOOT=ReallySuppress MsiExec.exe /qn /X{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} REBOOT=ReallySuppress 
 :Sophos Antivirus MsiExec.exe /qn /X{8123193C-9000-4EEB-B28A-E74E779759FA} REBOOT=ReallySuppress MsiExec.exe /qn /X{36333618-1CE1-4EF2-8FFD-7F17394891CE} REBOOT=ReallySuppress MsiExec.exe /qn /X{DFDA2077-95D0-4C5F-ACE7-41DA16639255} REBOOT=ReallySuppress MsiExec.exe /qn /X{CA3CE456-B2D9-4812-8C69-17D6980432EF} REBOOT=ReallySuppress MsiExec.exe /qn /X{3B998572-90A5-4D61-9022-00B288DD755D} REBOOT=ReallySuppress 
 :Sophos System Protection MsiExec.exe /qn /X{934BEF80-B9D1-4A86-8B42-D8A6716A8D27} REBOOT=ReallySuppress MsiExec.exe /qn /X{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6} REBOOT=ReallySuppress 
 :Sophos Network Threat Protection MsiExec.exe /qn /X{66967E5F-43E8-4402-87A4-04685EE5C2CB} REBOOT=ReallySuppress 
 :Sophos Health MsiExec.exe /qn /X{A5CCEEF1-B6A7-4EB4-A826-267996A62A9E} REBOOT=ReallySuppress MsiExec.exe /qn /X{D5BC54B8-1DA1-44F4-AE6F-86E05CDB0B44} REBOOT=ReallySuppress MsiExec.exe /qn /X{E44AF5E6-7D11-4BDF-BEA8-AA7AE5FE6745} REBOOT=ReallySuppress 
 :Sophos Diagnostic Utility MsiExec.exe /qn /X{4627F5A1-E85A-4394-9DB3-875DF83AF6C2} REBOOT=ReallySuppress 
 :Sophos Heartbeat MsiExec.exe /qn /X{DFFA9361-3625-4219-82C2-9EF011E433B1} REBOOT=ReallySuppress 
 :Sophos Management MsiExec.exe /qn /X{A1DC5EF8-DD20-45E8-ABBD-F529A24D477B} REBOOT=ReallySuppress MsiExec.exe /qn /X{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179} REBOOT=ReallySuppress MsiExec.exe /qn /X{D875F30C-B469-4998-9A08-FE145DD5DC1A} REBOOT=ReallySuppress MsiExec.exe /qn /X{2C14E1A2-C4EB-466E-8374-81286D723D3A} REBOOT=ReallySuppress 
 :UI MsiExec.exe /qn /X{D29542AE-287C-42E4-AB28-3858E13C1A3E} REBOOT=ReallySuppress :SophosClean "C:\Program Files\Sophos\Clean\uninstall.exe" :SED "C:\Program Files\Sophos\Endpoint Defense\uninstall.exe" /quiet :HMPA (managed) 3.5.3.563 "C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe" /uninstall /quiet :HMPA 1.0.0.699 "C:\Program Files (x86)\HitmanPro.Alert\uninstall.exe" /uninstall /quiet :HMPA 3.7.14.265 "C:\Program Files\HitmanPro\HitmanPro.exe" /uninstall /quiet 
 "C:\program files\Sophos\Sophos Endpoint Agent\uninstallcli.exe" :Sophos AutoUpdate MsiExec.exe /qn /X{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16} REBOOT=ReallySuppress MsiExec.exe /qn /X{BCF53039-A7FC-4C79-A3E3-437AE28FD918} REBOOT=ReallySuppress MsiExec.exe /qn /X{9D1B8594-5DD2-4CDC-A5BD-98E7E9D75520} REBOOT=ReallySuppress MsiExec.exe /qn /X{AFBCA1B9-496C-4AE6-98AE-3EA1CFF65C54} REBOOT=ReallySuppress MsiExec.exe /qn /X{E82DD0A8-0E5C-4D72-8DDE-41BB0FC06B3E} REBOOT=ReallySuppress :Sophos Anti-Virus (Endpoint) MsiExec.exe /qn /X{8123193C-9000-4EEB-B28A-E74E779759FA} REBOOT=ReallySuppress MsiExec.exe /qn /X{36333618-1CE1-4EF2-8FFD-7F17394891CE} REBOOT=ReallySuppress MsiExec.exe /qn /X{DFDA2077-95D0-4C5F-ACE7-41DA16639255} REBOOT=ReallySuppress MsiExec.exe /qn /X{CA3CE456-B2D9-4812-8C69-17D6980432EF} REBOOT=ReallySuppress MsiExec.exe /qn /X{3B998572-90A5-4D61-9022-00B288DD755D} REBOOT=ReallySuppress :Sophos Anti-Virus (Server) MsiExec.exe /qn /X{72E30858-FC95-4C87-A697-670081EBF065} REBOOT=ReallySuppress :Sophos System Protection MsiExec.exe /qn /X{934BEF80-B9D1-4A86-8B42-D8A6716A8D27} REBOOT=ReallySuppress MsiExec.exe /qn /X{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6} REBOOT=ReallySuppress :Sophos Network Threat Protection MsiExec.exe /qn /X{66967E5F-43E8-4402-87A4-04685EE5C2CB} REBOOT=ReallySuppress :Sophos Health MsiExec.exe /qn /X{A5CCEEF1-B6A7-4EB4-A826-267996A62A9E} REBOOT=ReallySuppress MsiExec.exe /qn /X{D5BC54B8-1DA1-44F4-AE6F-86E05CDB0B44} REBOOT=ReallySuppress MsiExec.exe /qn /X{E44AF5E6-7D11-4BDF-BEA8-AA7AE5FE6745} REBOOT=ReallySuppress :SDU (1.x) MsiExec.exe /qn /X{4627F5A1-E85A-4394-9DB3-875DF83AF6C2} REBOOT=ReallySuppress :Heartbeat MsiExec.exe /qn /X{DFFA9361-3625-4219-82C2-9EF011E433B1} REBOOT=ReallySuppress :Sophos Management Communications System MsiExec.exe /qn /X{A1DC5EF8-DD20-45E8-ABBD-F529A24D477B} REBOOT=ReallySuppress MsiExec.exe /qn /X{1FFD3F20-5D24-4C9A-B9F6-A207A53CF179} REBOOT=ReallySuppress MsiExec.exe /qn /X{D875F30C-B469-4998-9A08-FE145DD5DC1A} REBOOT=ReallySuppress MsiExec.exe /qn /X{2C14E1A2-C4EB-466E-8374-81286D723D3A} REBOOT=ReallySuppress :UI MsiExec.exe /qn /X{D29542AE-287C-42E4-AB28-3858E13C1A3E} REBOOT=ReallySuppress :SophosClean "C:\Program Files\Sophos\Clean\uninstall.exe" :SED "C:\Program Files\Sophos\Endpoint Defense\uninstall.exe" /quiet :HMPA (managed) 3.5.3.563 "C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe" /uninstall /quiet :HMPA 1.0.0.699 "C:\Program Files (x86)\HitmanPro.Alert\uninstall.exe" /uninstall /quiet :HMPA 3.7.14.265 "C:\Program Files\HitmanPro\HitmanPro.exe" /uninstall /quiet 
 rem Deleting Files rem reg delete "HKLM/Software/Sophos" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos" /f reg delete "HKCU/Software/Sophos" /f reg delete "HKEY_CLASSES_ROOT\Installer\Products\{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}" /f reg delete "HKEY_CLASSES_ROOT\Installer\Products\{D924231F-D02D-4E0B-B511-CC4A0E3ED547}" /f reg delete "HKEY_CLASSES_ROOT\Installer\Products\{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16}" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D929B3B5-56C6-46CC-B3A3-A1A784CBB8E4}" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7CD26A0C-9B59-4E84-B5EE-B386B2F7AA16}" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D924231F-D02D-4E0B-B511-CC4A0E3ED547}" /f reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4320988A-7DE0-478D-A38B-CE9509BCE320}" /f reg delete "HKLM/System/CurrentControlSet/Services/Interchk" /f reg delete "HKLM/System/CurrentControlSet/Services/SAV" /f reg delete "HKLM/System/CurrentControlSet/Services/Sophos" /f reg delete "HKLM/System/CurrentControlSet/Services/Sweep" /f DEL /F /S /Q /A "%allusersprofile%\Sophos" DEL /F /S /Q /A "C:\Program Files\Sophos" DEL /F /S /Q /A "C:\Program Files (X86)\Sophos" rd "%allusersprofile%\Sophos" /s /q rd "C:\Program Files\Sophos" /s /q rd "C:\Program Files (X86)\Sophos" /s /q rd "C:\Programdata\Sophos" /s /q reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2E75E9D9-62EE-4E63-8859-75FA0DD2B65C}" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{788a31a2-9d77-4994-a1c5-6c3036f56141}" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6C44AB65-918A-483C-9AF5-83D71D78A8B2}" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Sophos" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\56BA44C6A819C384A95F387DD1878A2B" /f reg delete "HKEY_CLASSES_ROOT\Installer\Features\56BA44C6A819C384A95F387DD1878A2B" /f reg delete "HKEY_CLASSES_ROOT\Installer\Products\56BA44C6A819C384A95F387DD1878A2B" /f reg delete "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\E932B7952303A1943A2218777329E5A8" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\E932B7952303A1943A2218777329E5A8" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\005DC63DEBF4349409CE7D46A64A5191" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01BDFF90F4169984288E587A8DFB3AA2" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01E37EB26B46ABF4389B7FAC14B627F9" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02FE2E0C0D6B7A4488DAADAF4A3A52FB" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05711425E3707D74BB79B804A44FB267" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05AA3B11EDB1FA248A14C142A948A813" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\09DA304F7CEF6304C9A1BB10A2E897E0" /f