This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos RMSNT Failure to install / update on one Server 2008 R2 endpoint

On one of our Windows Server 2008 R2 servers, I can push out the Sophos client from the Enterprise Console however every time it attempts to update the RMSNT component it fails.  Oddly if I run it manually from the Cache folder it installs fine and then temporarily reports from the Enterprise Console however this is short lived as the next time an automatic update is attempted it seems to fail to update again and this loop just continues.  The error log seems to suggest a problem uninstalling is causing the issue but I'm not sure how to resolve, I've tried several uninstalls / reinstalls and even some registry tweaks but everything to no avail so far.

Every other component deploys fine just the RMSNT!  Running the latest Enterprise Console version.

MSI (s) (A8:AC) [15:22:12:262]: SRSetRestorePoint skipped for this transaction.
MSI (s) (A8:AC) [15:22:12:263]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (s) (A8:AC) [15:22:12:267]: File will have security applied from OpCode.
MSI (s) (A8:AC) [15:22:12:282]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\cache\rms\Sophos Remote Management System.msi' against software restriction policy
MSI (s) (A8:AC) [15:22:12:282]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\rms\Sophos Remote Management System.msi has a digital signature
MSI (s) (A8:AC) [15:22:12:282]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\cache\rms\Sophos Remote Management System.msi is permitted to run because the user token authorizes execution (system or service token).
MSI (s) (A8:AC) [15:22:12:282]: End dialog not enabled
MSI (s) (A8:AC) [15:22:12:283]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\cache\rms\Sophos Remote Management System.msi
MSI (s) (A8:AC) [15:22:12:283]: Package we're running from ==> C:\Windows\Installer\8151c.msi
MSI (s) (A8:AC) [15:22:12:286]: APPCOMPAT: Compatibility mode property overrides found.
MSI (s) (A8:AC) [15:22:12:286]: APPCOMPAT: looking for appcompat database entry with ProductCode '{FED1005D-CBC8-45D5-A288-FFC7BB304121}'.
MSI (s) (A8:AC) [15:22:12:286]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (A8:AC) [15:22:12:290]: MSCOREE not loaded loading copy from system32
MSI (s) (A8:AC) [15:22:12:336]: Machine policy value 'TransformsSecure' is 1
MSI (s) (A8:AC) [15:22:12:337]: Machine policy value 'DisablePatch' is 0
MSI (s) (A8:AC) [15:22:12:337]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (A8:AC) [15:22:12:337]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (A8:AC) [15:22:12:337]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (A8:AC) [15:22:12:337]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
MSI (s) (A8:AC) [15:22:12:338]: APPCOMPAT: looking for appcompat database entry with ProductCode '{FED1005D-CBC8-45D5-A288-FFC7BB304121}'.
MSI (s) (A8:AC) [15:22:12:339]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (A8:AC) [15:22:12:339]: Transforms are not secure.
MSI (s) (A8:AC) [15:22:12:339]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\Windows\TEMP\Sophos RMS uninstall log.txt'.
MSI (s) (A8:AC) [15:22:12:339]: Command Line: REBOOT=ReallySuppress REMOVE=ALL SOPHOS_TP_TOKEN=********** CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 CLIENTPROCESSID=11016
MSI (s) (A8:AC) [15:22:12:339]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{65A94DAE-FA16-4F36-829D-1B1B5C1A7781}'.
MSI (s) (A8:AC) [15:22:12:339]: Product Code passed to Engine.Initialize: ''
MSI (s) (A8:AC) [15:22:12:339]: Product Code from property table before transforms: '{FED1005D-CBC8-45D5-A288-FFC7BB304121}'
MSI (s) (A8:AC) [15:22:12:339]: Product Code from property table after transforms: '{FED1005D-CBC8-45D5-A288-FFC7BB304121}'
MSI (s) (A8:AC) [15:22:12:340]: Note: 1: 1708
MSI (s) (A8:AC) [15:22:12:340]: Product: Sophos Remote Management System -- Installation failed.

MSI (s) (A8:AC) [15:22:12:341]: Windows Installer installed the product. Product Name: Sophos Remote Management System. Product Version: 4.0.2. Product Language: 1033. Manufacturer: Sophos Limited. Installation success or error status: 1605.

MSI (s) (A8:AC) [15:22:12:344]: MainEngineThread is returning 1605
MSI (s) (A8:F0) [15:22:12:344]: No System Restore sequence number for this installation.
This action is only valid for products that are currently installed.
C:\ProgramData\Sophos\AutoUpdate\cache\rms\Sophos Remote Management System.msi
MSI (s) (A8:F0) [15:22:12:346]: User policy value 'DisableRollback' is 0
MSI (s) (A8:F0) [15:22:12:346]: Machine policy value 'DisableRollback' is 0
MSI (s) (A8:F0) [15:22:12:346]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (A8:F0) [15:22:12:346]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (A8:F0) [15:22:12:347]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (A8:F0) [15:22:12:347]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (A8:F0) [15:22:12:347]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (A8:F0) [15:22:12:347]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (A8:F0) [15:22:12:347]: Restoring environment variables
MSI (c) (08:6C) [15:22:12:350]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (08:6C) [15:22:12:350]: MainEngineThread is returning 1605
=== Verbose logging stopped: 01/03/2016 15:22:12 ===



This thread was automatically locked due to age.