Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 0 subscribers
  • Views 9743 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

commandline obfuscation utility for SophosSAU<Hostname> users password?

JSCR

hello all,

is there an commandline obfuscation utility for obfuscating SophosSAU<Hostname> users password like there is for Sophos Update Manager user? The hashes made with the tool from C:\sec_300\tools\ are not working. The only way I found to obfuscate SophosSAU... password is the way from Artikel-ID: 111665, which is a bit bulky if you have to deploy a bunch of RODCs.

Regards Joerg



This thread was automatically locked due to age.
Parents
  • 0
    Hi,

    As they are RODCs, the SophosSAU account will need to be created prior to install as per:
    www.sophos.com/.../48910.aspx

    I'm not sure how you're planning to install, but could you create a domain account first, use the method you mention in your post to obtain and pre-stage a obfuscated password in the registry, then install.

    If you export this reg key to a reg file, you could import that on the other computers before installing. That way all computers will have the same domain account and the password in the registry will be obfuscated.

    A batch file to run:

    regedit /i sau.reg
    \\cidpath\setup.exe -switches as per www.sophos.com/.../12570.aspx

    Or use reg.exe or a scripted approach to make it more self contained.

    Hope it help.
    Regards,
    Jak
Reply
  • 0
    Hi,

    As they are RODCs, the SophosSAU account will need to be created prior to install as per:
    www.sophos.com/.../48910.aspx

    I'm not sure how you're planning to install, but could you create a domain account first, use the method you mention in your post to obtain and pre-stage a obfuscated password in the registry, then install.

    If you export this reg key to a reg file, you could import that on the other computers before installing. That way all computers will have the same domain account and the password in the registry will be obfuscated.

    A batch file to run:

    regedit /i sau.reg
    \\cidpath\setup.exe -switches as per www.sophos.com/.../12570.aspx

    Or use reg.exe or a scripted approach to make it more self contained.

    Hope it help.
    Regards,
    Jak
Children
No Data
Unfiltered HTML