This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Update Managers Intermittently Failing Updates/Version Mismatch: Error 80040401

Hello,

Environment:

SEC 5.5.1 installed on Windows 2016 w/ remote DB on MSSQL2012 

2 Remote Update Managers on Windows 2016

 

Issue:

In SEC, both update managers are reporting update error 80040401. Both SUM's are able to check in, but updates fail as well as versions are mismatching (See screenshot below, top line is SEC server, bottom two are SUM's)

Troubleshooting:

Checked the logviewer.exe (C:/ProgramFiles/Sophos/UpdateManager) and found the same entry
"12/27/2019 2:08:17 PM Error Sophos Update Manager failed to update from product release 'Payload-SDDM' with version 84.5 as the installer returned an error: 1603"

Followed the troubleshooting instructions listed here:
https://community.sophos.com/kb/en-us/124277

I've reviewed the service account and the password has not changed and is still valid.

When reviewing the UserData regkey the formatting does not match the support article's recommendations. Instead of the computer name both SUM's are showing the value as "DomainControllerName;Domain;AccountName;0" Wondering if the DomainControllerName instead of DomainComputerName is messing with updating? Would like clarification before making regkey edits.

 

Regards,

David



This thread was automatically locked due to age.
Parents Reply Children
  • QC,

     

    I took a look at the log files you recommended in the other forum post that you linked. In the MSIXXX log I found this error "Error 1921.Service Sophos Agent (Sophos Agent) could not be stopped.  Verify that you have sufficient privileges to stop system services." Reviewing the Service's permissions, the "Log On As" value is set to Local system. Any info if this is the correct config?

     

    Regards,

    DD

  • FormerMember
    +1 FormerMember in reply to David D1

    Hi 

    Just checking past cases. Are you using Enhanced Tamper Protection? And is the SUM server assigned the policy.

    If so, can I get you to review the following article on the subject? 

    Please review and let us know how you make out and if you have any further questions. 

    Regards, 

  • RodS,

     

    Thanks Rod! Removed the tamper protection policies and the SUM's began updating properly. Thanks for the assistance!