SophosClean not installed on Protected endpoint.

Question

SEC 5.5.1; endpoint is running W10 LTSB. 
 Endpoint is a member of a AD-connected policied group; all other endpoint components were installed when the system was protected, and all other services are running. The C:\Program Files\Sophos\Clean folder was missing, and there were no \ clean* or \ hmpa* folders in C:\ProgramData\Sophos\AutoUpdate\Cache 
 This is a mystery. I have tried setting compliance with all policies; the system shows itself as updating successfully when updates are pushed to it, but the component never installs. There is no C:\Windows	emp install log file for it either. This is the only Windows endpoint that I have this problem with. 
 I tried pulling the install files manually from the SEC server, but wasn't able to find any guidelines for installing this beyond sophosclean.exe /uninstallsophos and sophosclean.exe /installsophos - anyone able to help with this? 
 Thanks, 
 Trece

QC · Accepted Answer

Hello Trece , 
 when updates are pushed to it - forgive my pedantry, ,at best the instruction to check for updates is pushed to the endpoint, it's the endpoint that pulls the updates 
 How was the system protected? It sounds like the endpoint hasn't been told to install EXP (either by checking it when using Protect from the console or by using the -hmpa switch with setup.exe ). The absence of the mentioned folders from the cache suggests this. 
 Christian..

SophosClean not installed on Protected endpoint.

Top Replies