Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 4616 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't configure roles on the Console

JacquesMONROY

Hello All,

I try to configure the Roles and Sub-Estates delegations.

With my AD Domain admin account, no problem : I can access to all features, configuration,...

I have created a new account to test (admin.test) these features.

This account has System Administrator Role (default conf), and can manage an OU on our AD. I verify with 'User and Groupe View' : all seems to be OK

 

But... when I launch the console I have this error :

"System.InvalidOperationException: No dashboard event configurations found in database.
   at Sophos.Management.Services.Dashboard.DashboardService.get_EventConfigurations()

----- [outer exception] -----
   -- error: 0x80131509
   -- facility: C#/.NET
   -- source:   Sophos.Management.Services

   at void __thiscall DashboardConfigData::GetInstrumentData(bool)
   at void __thiscall Dashboard::Refresh(bool)
   at void __thiscall CMainFrame::RefreshEverything(void)
   at __w64 long __thiscall CMainFrame::OnTriggerUpdate(unsigned int,__w64 unsigned int,__w64 long,int &)
   at int __cdecl Run(int,class bl::CommandLine,enum bl::ConsoleType::Type)
   at int __stdcall wWinMain(struct HINSTANCE__ *,struct HINSTANCE__ *,wchar_t *,int)"

I have tried different actions on local groups on the server, on the AD groupe (SophosDomainAdministrator), member of different groups (as server Administrators), verify access to the database, but nothing

 

I don't know where I can change some informations, membership of which group,...

The aim of this action is to delegate administration for our remote site.

 

Thanks a lot

 

Jacques



This thread was automatically locked due to age.
Parents
  • 0

    Hello Jacques,

    did you try with the local or a remote console? Anyway, my (remote) console users are members of (only) Distributed COM Users and Sophos Console Administrators. You should be fine.

    I've tried to reproduce this error ... it wasn't easy and I wonder how you did it it came about. Not sure if it's indeed the same error as there is a condition and a symptom you didn't mention: 

    1. the user has a Subestate other than Default selected
    2. the console does open but the error pops up after a few seconds and upon OK the console closes

    Is this the case?

    Christian

  • 0 in reply to QC

    Hello Christian,

     

    thanks for your answer. I have tested on local (actually, the account is local admin) and remote. The account is explicitly in Distributed COM Users, Sophos Console Admin. In User & Groups view, all seems to be OK.

    BUT :

    I have seen some issues on versions before 5.3.1 (https://community.sophos.com/kb/en-us/122529) and we have 5.3.0... Can this explain our problem ? We plan to use AD groups to delegate Sophos admin (like AD admin).

    We looks for update our server (I have tried 5.31 and 5.4.1 console, but it's not compatible with our Sophos Service...)

     

    Thanks a lot

     

    Jacques

     

Reply
  • 0 in reply to QC

    Hello Christian,

     

    thanks for your answer. I have tested on local (actually, the account is local admin) and remote. The account is explicitly in Distributed COM Users, Sophos Console Admin. In User & Groups view, all seems to be OK.

    BUT :

    I have seen some issues on versions before 5.3.1 (https://community.sophos.com/kb/en-us/122529) and we have 5.3.0... Can this explain our problem ? We plan to use AD groups to delegate Sophos admin (like AD admin).

    We looks for update our server (I have tried 5.31 and 5.4.1 console, but it's not compatible with our Sophos Service...)

     

    Thanks a lot

     

    Jacques

     

Children
  • +1 in reply to JacquesMONROY

    Hello Jacques.

     

    I was particularly asking about the Subestate used by this account. I've been only able to provoke this error by deliberately introducing a database inconsistency - that's why I asked about the details. I don't think it is an issue with rights if the account is a direct member of the mentioned two groups.

    So, if the Subestate assigned to this user is not Default please try to select this subestate with "your" account. If this results in the same error delete and re-create the subestate.

    Christian

  • 0 in reply to QC

    Hello Christian,

    And thank you for your diagnostic. With Default subestate, it works (with mine and the test account). After that, I have deleted and re-create the subestate, reaffect the test user, and now I can access to subestate, even after "cleaning" the test account to be a member only for the target groups. Now, all the delegates can manage their subestate, after re-creation.

    Problem resolved !

    Thanks a lot !

    Jacques

     

Unfiltered HTML