Help I cannot upgrade

Question

Okay I am a Domain Admin I am trying to upgrade to 5.5.0 first I didn't have permission fixed that issue ...sorta 
 then the db needed upgraded... fine updated mssql ... no more updates found 
 ran the installer DB needs upgraded ok so I scour the web ... nothing except build the db by hand ... really by hand? ... really? 
 start running the cmds 
 don't have permission ... made myself the OWNER of every db in the system 
 try again still don't have permission 
 I have spent all day trying to upgrade this junk because my renewed license wont work and my stuff is "off" because I cant get this system to upgrade 
 simplifying security... what a joke this is by far the most complex upgrade I have ever seen even SharePoint upgrades easier than this why am I messing with the db anyway this isn't smart or simple but as I am out of ideas any suggestions would be greatly appreciated thanks

jak · Accepted Answer

When you are getting the message about the database needing to be upgraded first I assume it's this message: https://community.sophos.com/kb/en-us/113945#ServerUpgradeChecks 
 Is that correct? 
 This isn't about the SQL instance version but more about the Database component of the SEC installation. 
 You have 3 main components to a SEC install: The Database, the Management Console and the Management services. 
 I assume that all components are on the same computer so you have a compact installation where all 3 roles should be installed locally. If you look in Programs and Features you should see the 3 components, Console+Database+Management Server. 
 If you don't have the Sophos Database component despite having a local database this could be the problem during the upgrade. 
 Whatever your current install version of SEC is, I would suggest adding the database component of that version if you don't have it. Of course you already have the underlying SQL database, so you just need to add the same version of the database component back so it appears installed to the new installer. 
 The commands to install the Database component without 'touching' the database are in this article: https://community.sophos.com/kb/en-us/118900 
 I.e. 
 32-bit Computer msiexec /i"C:\sec_52\ServerInstaller\Database32.msi" DATABASE_SERVERNAME="(local)\SOPHOS" DATABASE_USERNAME="SophosManagement" DATABASE_USERNAMEDOMAIN="Domain" INSTALLDIR="C:\Program Files\Sophos" CREATE_DATABASES=0 
 64-bit Computer msiexec /i"C:\sec_52\ServerInstaller\Database64.msi" DATABASE_SERVERNAME="(local)\SOPHOS" DATABASE_USERNAME="SophosManagement" DATABASE_USERNAMEDOMAIN="Domain" INSTALLDIR="C:\Program Files (x86)\Sophos" CREATE_DATABASES=0 
 Note the CREATE_DATABASES property tells the MSI not to worry about the database and really just unpacks the files and registers the install with the system. 
 I'm not sure what version you are starting with but adjust the MSI path accordingly to the current version install files. I assume you still have the install directory of the current installed version in the root of the C drive. If not you will have to download the SFX for the installed version from Sophos.com Hopefully this might explain the problem you have but I've made some assumptions. 
 Regards, 
 Jak

jak · Answer

Glad you're up and running and at least you know it's working and how. 
 Do you have any desire to move to a Cloud based solution? The Sophos Central managed client does now seem to be getting most of the attention, certainly when it comes to integrating the next best thing. Plus you get mobile management. 
 Sophos semi-recently acquired Surfright, the company behind Hitman Pro. The focus on that software being exploit mitigation (signature-less) and anti-ransomeware, the Cryptoguard feature spots files being encrypted, shredded, etc, and recover those that were before the threat is terminated - https://www.youtube.com/watch?v=3KGVqKrRZo0 . 
 The are both available in Central and SEC managed on-premise. One benefit of Central is that it has Root Cause Analytics (RCA) to describe how the malware was detected and what files were touched, etc.. https://www.youtube.com/watch?v=AOsjUjp4P7Q . It has a little more management over the SEC solution. 
 The next thing on the cards (I assume by the end of the year) will most likely be the machine learning technology of Invincea https://www.invincea.com/2017/02/sophos-to-acquire-invincea-to-add-industry-leading-machine-learning-to-its-next-generation-endpoint-protection-portfolio/ . This should do great things for pre-execution detection of malware. 
 So with the more traditional signature AV feature as backup lets say, the mitigation runtime work of HitmanPro (including Cryptoguard) and then the pre-execution machine learning of Invincea, I think that the Sophos Endpoint, along with all the control feature to add layers will be up there with anyone when it comes to detection. 
 I'm pretty optimistic. 
 Regards, 
 Jak