Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 0 subscribers
  • Views 23639 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Event 1026 Patch Data Loader

BMTDT

Hi,

I have been getting the 1026 Data loader error in event viewer similar to this

https://www.sophos.com/en-us/support/knowledgebase/116495.aspx

The Sophos Patch Assessment - Event Viewer says its out of date.

The windows event viewer contains access to path 'C:\ProgramData\Sophos\Sophos Endpoint Management\4.0\Updates\Secure\SDFs\SophosPA\PSRVR' is denied.

I have attempted to give access to the Sophos account with NTFS permissions. This only works for a few hours before it is automatically removed from permissions.

---Resutls from your knowledgebase -----

When i check if the folder exist, it does except the number 5 is a 4, so it appears something hasn't updated properly.

C:\ProgramData\Sophos\Sophos Endpoint Management\5.0\Updates\Secure\SDFs\SophosPA\PSRVR

The Sophos Patch Feed is in the task scheduler. It runs after triggered, repeat every 1 hour for a duration of 1 day.

When i run this tasks and it is 'Running' It doesn't appear in the task manager.

In the PLS folder there is 256 folders from 00 to FF. Each of these contain multiple folders that then contain pls files.

Any help would be great

:57484


This thread was automatically locked due to age.
Parents
  • 0

    Where can I find the SUM's Config.xml file?

    Bellow is the message that appears in the PatchDataLodaer.log. 


    I had reset permissions to the PDATA folder but after a few hours it removed the SOPHOS ACCOUNT from the permissions.

    %ProgramData%\Sophos\Sophos Endpoint Management\ does have read permissions for Sophos Console Service Users group. Which includes Sophos account

    The Inheritance for Sophos Console Service Users stops at %ProgramData%\Sophos\Sophos Endpoint Management\4.0\

    The updates folder inside 4.0\ is read only (and doesn't inherant permissions)

    It would have stoped working after i updated to 5.3. 

    The PLS folder is at 

    %ProgramData%\Sophos\Patch\PatchDataLoader\Download\PLS

    Matt

    ____________________________________________________________________

    2015-06-10 11:02:00 | PID 10204 | TID 1 | ID: 3001 | Severity: info | Begin Sophos Patch Data Loader processing.-- Evidence --

    2015-06-10 11:02:01 | PID 10204 | TID 1 | ID: 1026 | Severity: error | Fatal exception. Abort processing.-- Sophos Exception Details --
    Source Message: Fatal error.
    Source:
    Source Timestamp: 10/06/2015 11:02:01 AM
    Source Machine: <SERVER>
    Source Exception Type: Sophos.NAC.Core.ExceptionManagement.EndForceException
    Source:
    Source App Domain: PatchDataLoader.exe
    Source Thread Id: 1
    Source Thread Identity:
    Source Win Identity: <DOMAIN>\SophosAccount
    Help Link:
    --Runtime Evidence--
    -- System Exception Details --(Contained Exception)
    Message: Access to the path 'C:\ProgramData\Sophos\Sophos Endpoint Management\4.0\Updates\Secure\SDFs\SophosPA\PSRVR\PDATA' is denied.
    Type: UnauthorizedAccessException
    Source: mscorlib
    Target: Void WinIOError(Int32, System.String)
    Help Link:

    :57531
Reply
  • 0

    Where can I find the SUM's Config.xml file?

    Bellow is the message that appears in the PatchDataLodaer.log. 


    I had reset permissions to the PDATA folder but after a few hours it removed the SOPHOS ACCOUNT from the permissions.

    %ProgramData%\Sophos\Sophos Endpoint Management\ does have read permissions for Sophos Console Service Users group. Which includes Sophos account

    The Inheritance for Sophos Console Service Users stops at %ProgramData%\Sophos\Sophos Endpoint Management\4.0\

    The updates folder inside 4.0\ is read only (and doesn't inherant permissions)

    It would have stoped working after i updated to 5.3. 

    The PLS folder is at 

    %ProgramData%\Sophos\Patch\PatchDataLoader\Download\PLS

    Matt

    ____________________________________________________________________

    2015-06-10 11:02:00 | PID 10204 | TID 1 | ID: 3001 | Severity: info | Begin Sophos Patch Data Loader processing.-- Evidence --

    2015-06-10 11:02:01 | PID 10204 | TID 1 | ID: 1026 | Severity: error | Fatal exception. Abort processing.-- Sophos Exception Details --
    Source Message: Fatal error.
    Source:
    Source Timestamp: 10/06/2015 11:02:01 AM
    Source Machine: <SERVER>
    Source Exception Type: Sophos.NAC.Core.ExceptionManagement.EndForceException
    Source:
    Source App Domain: PatchDataLoader.exe
    Source Thread Id: 1
    Source Thread Identity:
    Source Win Identity: <DOMAIN>\SophosAccount
    Help Link:
    --Runtime Evidence--
    -- System Exception Details --(Contained Exception)
    Message: Access to the path 'C:\ProgramData\Sophos\Sophos Endpoint Management\4.0\Updates\Secure\SDFs\SophosPA\PSRVR\PDATA' is denied.
    Type: UnauthorizedAccessException
    Source: mscorlib
    Target: Void WinIOError(Int32, System.String)
    Help Link:

    :57531
Children
No Data
Unfiltered HTML