Configuring RMS communication on a remote workgroup PC

Question

Hi, 
 Our Sophos Partner helped me last week with setting up external Message Relay, and the associated split DNS etc. that is needed for it to work. 
 As part of this, he created a ReInit.vbs script to run on standalone, remote clients which are not currently managed by our SEC console. When we tested while he was here, this seemed to work fine. However, I have tried today, using a new Windows 10 (workgroup) PC with vanilla install of SES. I then ran the script and rebooted the PC, but the PC doesn't seem to be communicating with our SEC server. 
 I checked under HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Messaging System\Router | ParentAddress , but the 'Messaging System' entry doesn't exist, so I assume there will be no RMS communication. 
 Is there any other way I can get Endpoint Security RMS configured on a new workstation so that it appears in the SEC console, e.g. by exporting & importing the config from a PC with correct configuration, or creating an installation package that I can run from the client side? 
 thanks 
 Dan

QC · Accepted Answer

Hello Dan, 
 the installer from the Sophos site is just this - standalone . Meaning no management whatsoever, it does not contain the RMS component. As said, there should be a CID specifically configured for endpoints communicating via the relay - usually the location the relay is updating from (and as it is for "outside" endpoints normally accessible over HTTP, i.e. published with a web server). This can be tweaked though, unless I'm mistaken you could install with the same package (or from the same location) the "inside" endpoints use - which does contain RMS - and redirect the roaming endpoints using the ReInit script. 
 Christian