Auto deploy endpoints from sophos enterpise console

Hello BigSteve,

when you set up AD Sync you have the Automatically deploy option. Please note that this has some restrictions, particularly it doesn't re-try protection after it has failed.
Otherwise, did you try right-click Protect Computers?

Christian

Hello BigSteve,

when you set up AD Sync you have the Automatically deploy option. Please note that this has some restrictions, particularly it doesn't re-try protection after it has failed.
Otherwise, did you try right-click Protect Computers?

Christian

Hi!,

Yes its selected in sync properties that it deploys automatically and I have tried the manual approach of right clicking and selecting protect computer. It showed the hour glass symbol and then just disappeared. 

Thanks.

Bigsteve :)

Hello Bigsteve,

the Protecting Computers chapter in the Console Help refers to the relevant docs and articles. Apparently something's missing in the endpoint configuration. There's also an article on how Protect works or is supposed to work.

Christian

Hello,

Sorry for the late reply Ive actually been away. 

I have actually followed this and still does not work. I have windows firewall disabled so I dont see how that could be blocking it :/

Hello BigSteve,

not necessarily the firewall. I assume the Started Task is created but fails. The Task Scheduler logs should record this.
One possible cause is the Do not allow storage of passwords and credentials for network authentication security setting.

Christian

Hi Christian,

Thank you for getting back. Where would I find this to check?

Many thanks

Hello BigSteve,

the setting is in Local Security Policy, Local Policies → Security Options: Network access: Do not allow storage of passwords and credentials for network authentication. By default Disabled, AFAIK if it's Enabled the started task fails because the credentials for accessing the CID aren't stored with the task.

You should find the install task and its history under Computer Management → System Tools → Task Scheduler → Task Scheduler Library. If necessary from the Actions pane Enable All Tasks History.

Christian

Hi Christian,

It seems that in the local policy is disabled like it should be :/ and I cannot locate the install task or the history of it on either my PC im downloading too or the server. 

Thank you.

Hello BigSteve,

if you right-click Protect Computers (using the same credentials as for AD sync) you get the hourglass, right? But there is no error message after it has disappeared and there is no trace of the Sophos_InstTask on the endpoint (either the Task Scheduler Library or the Event Viewer, Applications and Services Logs, Microsoft, Windows, Task Scheduler?
Please see also this troubleshooting article. 

Christian