Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 0 subscribers
  • Views 23641 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Event 1026 Patch Data Loader

BMTDT

Hi,

I have been getting the 1026 Data loader error in event viewer similar to this

https://www.sophos.com/en-us/support/knowledgebase/116495.aspx

The Sophos Patch Assessment - Event Viewer says its out of date.

The windows event viewer contains access to path 'C:\ProgramData\Sophos\Sophos Endpoint Management\4.0\Updates\Secure\SDFs\SophosPA\PSRVR' is denied.

I have attempted to give access to the Sophos account with NTFS permissions. This only works for a few hours before it is automatically removed from permissions.

---Resutls from your knowledgebase -----

When i check if the folder exist, it does except the number 5 is a 4, so it appears something hasn't updated properly.

C:\ProgramData\Sophos\Sophos Endpoint Management\5.0\Updates\Secure\SDFs\SophosPA\PSRVR

The Sophos Patch Feed is in the task scheduler. It runs after triggered, repeat every 1 hour for a duration of 1 day.

When i run this tasks and it is 'Running' It doesn't appear in the task manager.

In the PLS folder there is 256 folders from 00 to FF. Each of these contain multiple folders that then contain pls files.

Any help would be great

:57484


This thread was automatically locked due to age.
Parents
  • 0

    Hello BMTDT,

    do I simply change the registry value to 5.1?

    probably not. [I wrote:] For versions 5.1 to 5.3 the folder is 5.1 - this is not the whole truth. On the server I checked the first SEC was 5.1. On another server which initially had SEC 4.5 the folder is 4.5. Seems that this structure isn't moved with later upgrades. Thus the path is probably correct (you can also find it in SUM's config.xml). 

    As you've already read 116495 - any useful error messages in the PatchDataLoader.log or just the Access denied? The permissions should be inherited from %ProgramData%\Sophos\Sophos Endpoint Management\. But anyway ... the PLS folder is where? PatchDataLoader runs under the "Database Account" and has normally only read access to \PSRVR. Patch data should be downloaded to %ProgramData%\Sophos\Patch\.

    Last but not least - when did it stop working?

    Christian

    :57513
Reply
  • 0

    Hello BMTDT,

    do I simply change the registry value to 5.1?

    probably not. [I wrote:] For versions 5.1 to 5.3 the folder is 5.1 - this is not the whole truth. On the server I checked the first SEC was 5.1. On another server which initially had SEC 4.5 the folder is 4.5. Seems that this structure isn't moved with later upgrades. Thus the path is probably correct (you can also find it in SUM's config.xml). 

    As you've already read 116495 - any useful error messages in the PatchDataLoader.log or just the Access denied? The permissions should be inherited from %ProgramData%\Sophos\Sophos Endpoint Management\. But anyway ... the PLS folder is where? PatchDataLoader runs under the "Database Account" and has normally only read access to \PSRVR. Patch data should be downloaded to %ProgramData%\Sophos\Patch\.

    Last but not least - when did it stop working?

    Christian

    :57513
Children
No Data
Unfiltered HTML