Hi,
First of all i'd like to say i have poured hours into troubleshooting this and so i have tried the obvious things in terms of the setup itself. I believe the setup is sound.... that said.
I have a brand new deployment of Sophos Enterprise Console running for a customer on a Windows Server 2003 Standard SP2 server.
This has been setup to do active directory synchronisation for detecting computers and automatic deployment.
I have created the relevant group policies that allow the firewall ports between the server and the client i.e. 8194 for the clients and the server being server 2003 does not have the firewall enabled so no need to open up port 8192 and 8194 there. File and printer sharing etc is also allowed.
I have created the group policy which set the remote registry and task scheduler service to automatic and ensures the windows installer service is set to manual and not disabled.
Everything was working swimmingly i follow the knowledge based articles from Sophos to deploy the server with the sophos accounts created with the permissions required (These are domain accounts).
The first few machines were added to the domain in a new OU and Sophos was deployed to them no problem.
However, as more and more machines have been added i have ran into a problem. A random amount of machines simply refuse to install with that glorious and vague error "The installation cannot be started 0x000002e".
If i try and right click and choose protect computer and put in the details etc it does nothing.... i don't even get the green downloading icon on the greyed out computer, i literally get NOTHING!
There are multiple sites for this client and they are all joined via a VPN network however, this is not a firewall issue across these either as i have at least one computer in each site where a deployment has been successful.
I have tested that the computers can browse the installation directory and that's fine as are the permissions. I have checked that i can browse and setup scheduled tasks from the Server on the clients and again this is fine. I can see that the firewall ports are open and the services are configured as they should be.
I have tried to check for error logs on the remote computers but there are no sophos logs or event logs on the client machines so the server has failed completely to even bother talking to the computers.
This would usually hark of a firewall issue but it's not.
I've ping the computer netbios name and fqdn from the server fine.
The scheduled task is not being created on the remote machine to start the installation and it's very very frustrating. Admittedly on some machines there has been a copy of mcafee installed but that is a seperate issue and is not a consistent case with the failed deployments.
As i mentioned some machines have deployed perfectly fine and so it would point to a client pc problem except that it's simply too many maybe 50% of them.
I've tried everything i can possibly think of and i have done many deployments of the product before and this is a problem that has occurred now and again but has been resolvable.
Any ideas ??? in particular regarding why it doesn't even seem to be attempting to contact the computer??
This thread was automatically locked due to age.