ParentAddress key incorrect for newly Endpoint installation

Hi there

I have build up my own sophos installer with Sophos Deploy Packager via command:

.\DeploymentPackager.exe -cli -mng yes -cidpath "C:\ProgramData\Sophos\Update Manager\Update Manager\CIDs\S000\SAVSCFXP" -updp http://XXX.YYY.ZZZ:1777/CIDs/S000/SAVSCFXP/ -sfxpath D:\Sophos_src\sav_107_custom.no.silient.exe -crt R

After it's installation to Windows 7 computer and check registry but the ParentAddress key is incorrect server name as shown below.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Messaging System\Router]
"ServiceDescription"="Message router for Sophos applications"
"ServiceHomeDir"="C:\\Program Files (x86)\\Sophos\\Remote Management System\\"
"ParentAddress"="WIN-PKJ3IHORP4C,WIN-PKJ3IHORP4C"
"ParentPort"=dword:00002000
"ConnectionCache"=dword:0000000a
"NumSenderThreads"=dword:00000003
"NumORBThreads"=dword:00000004
"IORSenderPort"=dword:00002000
"ServiceArgs"="-ORBListenEndpoints iiop://:8193/ssl_port=8194"
"NotifyRouterUpdate"="EM"

anyone know why it shown as "WIN-PKJ3IHORP4C" instead of Enterprise Server name "XXX.YYY.ZZZ" and how to fix it ??

  • Hello Phutapong Suanyim,

    why do you think this is the incorrect server name (and why did you check this particular registry value)? Admittedly that is just lists two instances of the same NetBIOS name is unusual but it suggests that a) the management server is configured to obtain its IP via DHCP and b) there's no FQDN assigned.

    The ParentAddress is set upon RMS initialization from the ParentRouterAddress in mrinit.conf the CIDs root (...\CIDs\S000\SAVSCFXP\). mrinit.conf in turn is created on the management server during SEC installation.

    Christian

  • In reply to QC:

    Hi Christian

    Thank you to quick reply.

    No I don't know what exactly issue on this but per my observed the ParentAddress is not set properly and the mrinit.conf from %temp%\cid_packager_temp\SAVSCFXP\ doesn't copy to C:\Program Files\Sophos\Remote Management System\ like usual installation for other 1400 Windows 7 computers.

    It would be great if you please explain how installation mechanism for Sophos installer.

     

    Bests,

    Pond

  • In reply to Phutapong Suanyim:

    Hello Pond,

    do I understand correctly that just this one out of 1400 computers doesn't have the expected ParentAddress? Again the question - what gave you the idea to check this registry value, it's usually not something you use to verify that the installation is ok.
    It's still not clear what the observed problem is: Endpoint not "appearing" in the console? Endpoint failing to update? Or?

    So you say that mrinit.conf in the S000 CID is correct (containing XXX.YYY.ZZZ in the ParentRouterAddress)? And the mrinit.conf in C:\Program Files (x86)\Sophos\Remote Management System\ isn't the one from the CID (or installation package)?

    Christian

  • In reply to QC:

    Hi Christian

    Yes, you understand corectly, this one out of 1400 computers doesn't have the expected ParentAddress value.

    As I have no idea how to verify that the installation is ok or not and I just suppose the expected ParentAddress value is needful. that why I keep check this registry value.

    the main problem are this endpoint not "appearing" in the console and it failing to update as well.

     

    So you say that mrinit.conf in the S000 CID is correct (containing XXX.YYY.ZZZ in the ParentRouterAddress)? And the mrinit.conf inC:\Program Files (x86)\Sophos\Remote Management System\isn't the one from the CID (or installation package)?

     

    Yes , that's correct.

     

    Bests.

    Pond

     

  • In reply to Phutapong Suanyim:

    Hello Pond,

    if Sophos has never been installed on this endpoint and the package works on other machines I don't see from where it could pick up the incorrect mrinit.conf.
    Hm, I'd uninstall what is there, afterwards (just to make sure there aren't any leftovers) remove any remaining Sophos folder from Program FilesProgram Files (x86), and ProgramData. Then run the package again. The install should create a Sophos ES setup.log in the user's %TEMP%. Check for other logs in this %TEMP% and \Windows\Temp\.

    Is the WIN-PKJ3IHORP4C name completely unfamiliar?

    Christian 

  • In reply to QC:

    Hi Christian

    I have rebuild the Sophos installer which include Sophos AutoUpdate only (chosen remote management, firewall and NAC components are downloaded from the update source). and I got error log in ClientMRInit-20171004-105847.log , please see detail below.

     

    04.10.2017 03:58:47 0DE4 I SOF: ./ClientMRInit-20171004-105847.log
    04.10.2017 03:58:47 0DE4 D ClientMRInit installing
    04.10.2017 03:58:47 0DE4 D mrfile=`MRInit.conf`
    cafile=`cac.pem`
    filepath=`.`
    rtrname=`Router`
    logpath=`.`
    04.10.2017 03:58:47 0DE4 I Opening initialisation file: ./MRInit.conf
    04.10.2017 03:58:47 0DE4 I Opening root certificate initialisation file: ./cac.pem
    04.10.2017 03:58:47 0DE4 I Intelligent updating is: Off
    04.10.2017 03:58:47 0DE4 D CA certificates are the same, no action taken.
    04.10.2017 03:58:47 0DE4 I Message Router identity key do not match. Upgrading to new key.
    04.10.2017 03:58:47 0DE4 I Managed Application identity key do not match. Upgrading to new key.
    04.10.2017 03:58:47 0DE4 I Management Agent identity key do not match. Upgrading to new key.
    04.10.2017 03:58:47 0DE4 D CheckParentAddress( `XXX.YYY.ZZZ,YYY`->`XXX.YYY.ZZZ,YYY` )
    04.10.2017 03:58:47 0DE4 D IsThisComputer[XXX.YYY.ZZZ,YYY]
    04.10.2017 03:58:47 0DE4 D Found 4 addresses
    04.10.2017 03:58:47 0DE4 I Connection cache size for endpoint will be set to 10 , NumSenderThreads will be set to 3, NumORBThreads will be set to 4
    04.10.2017 03:58:47 0DE4 I Parent router ports match, no action taken: 8192
    04.10.2017 03:58:47 0DE4 I Router IOR ports match, no action taken: 8192
    04.10.2017 03:58:47 0DE4 D Router service args are the same (-ORBListenEndpoints iiop://:8193/ssl_port=8194), no change.
    04.10.2017 03:58:47 0DE4 I ClientMRInit successful exit

     

    For Installation log file is here.

    Sophos ES setup.txt
    10/5/2017,1:36:27 AM,Information,Process security set successfully,
    10/5/2017,1:36:33 AM,Information,Verified that contents of CID C match the manifest file,
    10/5/2017,1:36:33 AM,Information,Searching for third-party security software.,
    10/5/2017,1:36:38 AM,Information,Return Code 10 from third-party security software removal tool.,
    10/5/2017,1:36:38 AM,Information,Removal Tool Completed: No third-party security software found.,
    10/5/2017,1:36:38 AM,Information,Beginning uninstall of Sophos AutoUpdate,
    10/5/2017,1:36:40 AM,Information,Action start 1:36:40: INSTALL.,
    10/5/2017,1:36:40 AM,Information,Action start 1:36:40: FindRelatedProducts.,
    10/5/2017,1:36:40 AM,Information,Action ended 1:36:40: FindRelatedProducts. Return value 0.,
    10/5/2017,1:36:40 AM,Information,Action start 1:36:40: SetSAUVersionProperties.,
    10/5/2017,1:36:41 AM,Information,Action ended 1:36:41: SetSAUVersionProperties. Return value 1.,
    10/5/2017,1:36:41 AM,Information,Action start 1:36:41: AppSearch.,
    10/5/2017,1:36:41 AM,Information,Action ended 1:36:41: AppSearch. Return value 1.,
    10/5/2017,1:36:41 AM,Information,Action start 1:36:41: CheckServerCore.,
    10/5/2017,1:36:41 AM,Information,Action ended 1:36:41: CheckServerCore. Return value 1.,
    10/5/2017,1:36:41 AM,Information,Action start 1:36:41: LaunchConditions.,
    10/5/2017,1:36:41 AM,Information,Action ended 1:36:41: LaunchConditions. Return value 1.,
    10/5/2017,1:36:41 AM,Information,Action start 1:36:41: ValidateProductID.,
    10/5/2017,1:36:41 AM,Information,Action ended 1:36:41: ValidateProductID. Return value 1.,
    10/5/2017,1:36:41 AM,Information,Action start 1:36:41: NoUpdateInProgress.,
    10/5/2017,1:36:42 AM,Information,Action ended 1:36:42: NoUpdateInProgress. Return value 1.,
    10/5/2017,1:36:42 AM,Information,Action start 1:36:42: setUserProfileNT.,
    10/5/2017,1:36:42 AM,Information,Action ended 1:36:42: setUserProfileNT. Return value 1.,
    10/5/2017,1:36:42 AM,Information,Action start 1:36:42: setAllUsersProfile2K.,
    10/5/2017,1:36:42 AM,Information,Action ended 1:36:42: setAllUsersProfile2K. Return value 1.,
    10/5/2017,1:36:42 AM,Information,Action start 1:36:42: CostInitialize.,
    10/5/2017,1:36:42 AM,Information,Action ended 1:36:42: CostInitialize. Return value 1.,
    10/5/2017,1:36:42 AM,Information,Action start 1:36:42: FileCost.,
    10/5/2017,1:36:42 AM,Information,Action ended 1:36:42: FileCost. Return value 1.,
    10/5/2017,1:36:42 AM,Information,Action start 1:36:42: CostFinalize.,
    10/5/2017,1:36:42 AM,Information,Action ended 1:36:42: CostFinalize. Return value 1.,
    10/5/2017,1:36:42 AM,Information,Action start 1:36:42: SetODBCFolders.,
    10/5/2017,1:36:42 AM,Information,Action ended 1:36:42: SetODBCFolders. Return value 0.,
    10/5/2017,1:36:42 AM,Information,Action start 1:36:42: ShutdownSAVGUI.,
    10/5/2017,1:36:43 AM,Information,Action ended 1:36:43: ShutdownSAVGUI. Return value 1.,
    10/5/2017,1:36:43 AM,Information,Action start 1:36:43: StopMonitor.,
    10/5/2017,1:36:43 AM,Information,Action ended 1:36:43: StopMonitor. Return value 1.,
    10/5/2017,1:36:43 AM,Information,Action start 1:36:43: PreserveServiceArgs.,
    10/5/2017,1:36:43 AM,Information,Action ended 1:36:43: PreserveServiceArgs. Return value 1.,
    10/5/2017,1:36:43 AM,Information,Action start 1:36:43: InstallValidate.,
    10/5/2017,1:36:50 AM,Information,Info 1603.The file C:\Program Files\Sophos\AutoUpdate\ALsvc.exe is being held in use by the following process: Name: ALsvc, ID: 2240, Window Title: (not determined yet).  Close that application and retry.,
    10/5/2017,1:36:50 AM,Information,Info 1603.The file C:\Program Files\Sophos\AutoUpdate\AUAdapter.dll is being held in use by the following process: Name: ManagementAgentNT, ID: 2164, Window Title: (not determined yet).  Close that application and retry.,
    10/5/2017,1:36:50 AM,Information,Action ended 1:36:50: InstallValidate. Return value 1.,
    10/5/2017,1:36:50 AM,Information,Action start 1:36:50: InstallInitialize.,
    10/5/2017,1:36:51 AM,Information,Action ended 1:36:51: InstallInitialize. Return value 1.,
    10/5/2017,1:36:51 AM,Information,Action start 1:36:51: RemoveExistingProducts.,
    10/5/2017,1:36:51 AM,Information,Action ended 1:36:51: RemoveExistingProducts. Return value 0.,
    10/5/2017,1:36:51 AM,Information,Action start 1:36:51: ScheduleSetPermissions.Rollback_x32.,
    10/5/2017,1:36:52 AM,Information,SchedulePermissionsRollback:  Initialized.,
    10/5/2017,1:36:52 AM,Information,SchedulePermissionsRollback:  PopulateComponentAttributeMap: Loaded components table in a table view object.,
    10/5/2017,1:36:52 AM,Information,SchedulePermissionsRollback:  Component attributes have been loaded successfully.,
    10/5/2017,1:36:52 AM,Information,SchedulePermissionsRollback:  Action data construction has been completed.,
    10/5/2017,1:36:52 AM,Information,SchedulePermissionsRollback:  Action data serialization has been completed.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: SetPermissions.Rollback_x32.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: SetPermissions.Rollback_x32. Return value 1.,
    10/5/2017,1:36:52 AM,Information,SchedulePermissionsRollback:  Custom action SetPermissions.Rollback has been scheduled.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: ScheduleSetPermissions.Rollback_x32. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: StopMonitorRollback.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: StopMonitorRollback. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: ScheduleAccountChanges.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: ScheduleAccountChanges. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: ProcessComponents.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: ProcessComponents. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: UnpublishFeatures.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: UnpublishFeatures. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: NoUpdateInProgressInSequence.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: NoUpdateInProgressInSequence. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: StopServices.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: StopServices. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: AutoUpdateServiceStopCheck.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: AutoUpdateServiceStopCheck. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: SetWaitSAUServiceUnlocked.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: SetWaitSAUServiceUnlocked. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: WaitSAUServiceUnlocked.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: WaitSAUServiceUnlocked. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: DeleteServices.,
    10/5/2017,1:36:52 AM,Information,Action ended 1:36:52: DeleteServices. Return value 1.,
    10/5/2017,1:36:52 AM,Information,Action start 1:36:52: RemoveRegistryValues.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: RemoveRegistryValues. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: DeleteSAURegistryValues.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: DeleteSAURegistryValues. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: RemoveIniValues.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: RemoveIniValues. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: SetWaitAUAdapterUnlocked.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: SetWaitAUAdapterUnlocked. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: WaitAUAdapterUnlocked.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: WaitAUAdapterUnlocked. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: RemoveFiles.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: RemoveFiles. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: CustomRemoveFoldersPrepare.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: CustomRemoveFoldersPrepare. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: CustomRemoveFoldersRollback.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: CustomRemoveFoldersRollback. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: CustomRemoveFolders.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: CustomRemoveFolders. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: RemoveFolders.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: RemoveFolders. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: CreateFolders.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: CreateFolders. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: InstallFiles.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: InstallFiles. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: BindImage.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: BindImage. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: WriteRegistryValues.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: WriteRegistryValues. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: WriteIniValues.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: WriteIniValues. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: SelfRegModules.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: SelfRegModules. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: InstallServices.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: InstallServices. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: StartServices.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: StartServices. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: RegisterUser.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: RegisterUser. Return value 0.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: RegisterProduct.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: RegisterProduct. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: PublishFeatures.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: PublishFeatures. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: PublishProduct.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: PublishProduct. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: AccountHandlerDeleteAccounts.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: AccountHandlerDeleteAccounts. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: CustomRemoveFoldersCommit.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: CustomRemoveFoldersCommit. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: SetRemoveTempFolders.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: SetRemoveTempFolders. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: RemoveTempFolders.,
    10/5/2017,1:36:53 AM,Information,Action ended 1:36:53: RemoveTempFolders. Return value 1.,
    10/5/2017,1:36:53 AM,Information,Action start 1:36:53: InstallFinalize.,
    10/5/2017,1:37:18 AM,Information,Action ended 1:37:18: InstallFinalize. Return value 1.,
    10/5/2017,1:37:18 AM,Information,Action start 1:37:18: UnregisterWithAutoUpdate.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0.,
    10/5/2017,1:37:18 AM,Information,Action ended 1:37:18: UnregisterWithAutoUpdate.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0. Return value 1.,
    10/5/2017,1:37:18 AM,Information,Action ended 1:37:18: INSTALL. Return value 1.,
    10/5/2017,1:37:18 AM,Information,Beginning uninstall of Sophos Remote Management System,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: INSTALL.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: AppSearch.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: AppSearch. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: ResetINSTALLDIR.AB2CCA78_E31E_4758_9EB0_BF5664C2EECF.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: ResetINSTALLDIR.AB2CCA78_E31E_4758_9EB0_BF5664C2EECF. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: ResetINSTALLDIR.A42953EB_3852_4E7A_82AB_8C060787C9A7.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: ResetINSTALLDIR.A42953EB_3852_4E7A_82AB_8C060787C9A7. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: ResetSOPHOS.A42953EB_3852_4E7A_82AB_8C060787C9A7.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: ResetSOPHOS.A42953EB_3852_4E7A_82AB_8C060787C9A7. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: LaunchConditions.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: LaunchConditions. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: FindRelatedProducts.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: FindRelatedProducts. Return value 0.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: ValidateProductID.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: ValidateProductID. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: setUserProfileNT.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: setUserProfileNT. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: setALLUSERSPROFILE2K.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: setALLUSERSPROFILE2K. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: setAllUsersProfile2K.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: setAllUsersProfile2K. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: CostInitialize.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: CostInitialize. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: FileCost.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: FileCost. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: IsolateComponents.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: IsolateComponents. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: CostFinalize.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: CostFinalize. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: SetODBCFolders.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: SetODBCFolders. Return value 1.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: MigrateFeatureStates.,
    10/5/2017,1:37:19 AM,Information,Action ended 1:37:19: MigrateFeatureStates. Return value 0.,
    10/5/2017,1:37:19 AM,Information,Action start 1:37:19: InstallValidate.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\ACE_SSL.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\ACE_SSL.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\RouterNT.exe is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_PI.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_PI.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\ace.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\ace.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\libeay32.dll is being held in use by the following process: Name: bacula-fd, Id: 1792, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\libeay32.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\libeay32.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\ssleay32.dll is being held in use by the following process: Name: bacula-fd, Id: 1792, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\ssleay32.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\ssleay32.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\ManagementAgentNT.exe is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\msvcp100.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\msvcp100.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\msvcr100.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\msvcr100.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\CertificationClientLibrary.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\CertificationClientLibrary.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\CertificationLib.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\CertificationLib.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\MSClientLib.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_AnyTypeCode.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_AnyTypeCode.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_CodecFactory.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_CodecFactory.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_Codeset.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_Codeset.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_DynamicAny.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_DynamicAny.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_PI_Server.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_PI_Server.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_PortableServer.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_PortableServer.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_SSLIOP.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_SSLIOP.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_Security.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_Security.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_Svc_Utils.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_Svc_Utils.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_Valuetype.dll is being held in use by the following process: Name: ManagementAgentNT, Id: 2164, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Info 1603. The file C:\Program Files\Sophos\Remote Management System\TAO_Valuetype.dll is being held in use by the following process: Name: RouterNT, Id: 2296, Window Title: '(not determined yet)'. Close that application and retry.,
    10/5/2017,1:37:21 AM,Information,Action ended 1:37:21: InstallValidate. Return value 1.,
    10/5/2017,1:37:21 AM,Information,Action start 1:37:21: InstallInitialize.,
    10/5/2017,1:37:22 AM,Information,Action ended 1:37:22: InstallInitialize. Return value 1.,
    10/5/2017,1:37:22 AM,Information,Action start 1:37:22: ScheduleSetPermissions.Rollback_x32.A42953EB_3852_4E7A_82AB_8C060787C9A7.,
    10/5/2017,1:37:22 AM,Information,SchedulePermissionsRollback:  Initialized.,
    10/5/2017,1:37:22 AM,Information,SchedulePermissionsRollback:  PopulateComponentAttributeMap: Loaded components table in a table view object.,
    10/5/2017,1:37:22 AM,Information,SchedulePermissionsRollback:  Component attributes have been loaded successfully.,
    10/5/2017,1:37:22 AM,Information,SchedulePermissionsRollback:  Action data construction has been completed.,
    10/5/2017,1:37:22 AM,Information,SchedulePermissionsRollback:  Action data serialization has been completed.,
    10/5/2017,1:37:22 AM,Information,Action start 1:37:22: SetPermissions.Rollback_x32.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: SetPermissions.Rollback_x32. Return value 1.,
    10/5/2017,1:37:23 AM,Information,SchedulePermissionsRollback:  Custom action SetPermissions.Rollback has been scheduled.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: ScheduleSetPermissions.Rollback_x32.A42953EB_3852_4E7A_82AB_8C060787C9A7. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: SetRMSCFGDIR.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: SetRMSCFGDIR. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: ProcessComponents.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: ProcessComponents. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: UnpublishComponents.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: UnpublishComponents. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: MsiUnpublishAssemblies.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: MsiUnpublishAssemblies. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: UnpublishFeatures.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: UnpublishFeatures. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: StopServices.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: StopServices. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: DeleteServices.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: DeleteServices. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: UnregisterComPlus.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: UnregisterComPlus. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: SelfUnregModules.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: SelfUnregModules. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: UnregisterTypeLibraries.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: UnregisterTypeLibraries. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RemoveODBC.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RemoveODBC. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: UnregisterFonts.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: UnregisterFonts. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RemoveRegistryValues.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RemoveRegistryValues. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RunClientMRInitUninstall.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RunClientMRInitUninstall. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: UnregisterClassInfo.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: UnregisterClassInfo. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: UnregisterExtensionInfo.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: UnregisterExtensionInfo. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: UnregisterProgIdInfo.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: UnregisterProgIdInfo. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: UnregisterMIMEInfo.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: UnregisterMIMEInfo. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RemoveIniValues.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RemoveIniValues. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RemoveShortcuts.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RemoveShortcuts. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RemoveEnvironmentStrings.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RemoveEnvironmentStrings. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RemoveDuplicateFiles.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RemoveDuplicateFiles. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RemoveFiles.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RemoveFiles. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RemoveFolders.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RemoveFolders. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: CreateFolders.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: CreateFolders. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: MoveFiles.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: MoveFiles. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: InstallFiles.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: InstallFiles. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: PatchFiles.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: PatchFiles. Return value 0.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: DuplicateFiles.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: DuplicateFiles. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: BindImage.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: BindImage. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: CreateShortcuts.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: CreateShortcuts. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RegisterClassInfo.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RegisterClassInfo. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RegisterExtensionInfo.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RegisterExtensionInfo. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RegisterProgIdInfo.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RegisterProgIdInfo. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RegisterMIMEInfo.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RegisterMIMEInfo. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: WriteRegistryValues.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: WriteRegistryValues. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: WriteIniValues.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: WriteIniValues. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: WriteEnvironmentStrings.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: WriteEnvironmentStrings. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RegisterFonts.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RegisterFonts. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: InstallODBC.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: InstallODBC. Return value 0.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RegisterTypeLibraries.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RegisterTypeLibraries. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RegisterComPlus.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RegisterComPlus. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: InstallServices.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: InstallServices. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: StartServices.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: StartServices. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: SelfRegModules.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: SelfRegModules. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RegisterUser.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RegisterUser. Return value 0.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: RegisterProduct.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: RegisterProduct. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: PublishComponents.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: PublishComponents. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: MsiPublishAssemblies.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: MsiPublishAssemblies. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: PublishFeatures.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: PublishFeatures. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: PublishProduct.,
    10/5/2017,1:37:23 AM,Information,Action ended 1:37:23: PublishProduct. Return value 1.,
    10/5/2017,1:37:23 AM,Information,Action start 1:37:23: InstallExecute.,
    10/5/2017,1:37:41 AM,Information,Action ended 1:37:41: InstallExecute. Return value 1.,
    10/5/2017,1:37:41 AM,Information,Action start 1:37:41: InstallFinalize.,
    10/5/2017,1:37:41 AM,Information,Action ended 1:37:41: InstallFinalize. Return value 1.,
    10/5/2017,1:37:41 AM,Information,Action start 1:37:41: RemoveExistingProducts.,
    10/5/2017,1:37:41 AM,Information,Action ended 1:37:41: RemoveExistingProducts. Return value 0.,
    10/5/2017,1:37:41 AM,Information,Action ended 1:37:41: INSTALL. Return value 1.,
    10/5/2017,1:37:41 AM,Information,Installing RMS configuration...,
    10/5/2017,1:37:41 AM,Information,Beginning installation of C:\Users\ADMIN~1.US-\AppData\Local\Temp\sophosa\sau\Sophos AutoUpdate.msi with command line RUN_FROM_CBS=1 USEAPPDATAONXP=1 BOOTSTRAP=noupdate REBOOT=ReallySuppress SOPHOS_TP_TOKEN=1 UPDATELOCATION="http://XXX.YYY.ZZZ:1777/CIDs/S000/SAVSCFXP/" RMSACTION=7,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: INSTALL.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: FindRelatedProducts.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: FindRelatedProducts. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: SetSAUVersionProperties.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: SetSAUVersionProperties. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: AppSearch.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: AppSearch. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: CheckServerCore.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: CheckServerCore. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: LaunchConditions.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: LaunchConditions. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: ValidateProductID.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: ValidateProductID. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: setUserProfileNT.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: setUserProfileNT. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: CheckRegForNullDACLs.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: CheckRegForNullDACLs. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: setAllUsersProfile2K.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: setAllUsersProfile2K. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: CostInitialize.,
    10/5/2017,1:37:42 AM,Information,Action ended 1:37:42: CostInitialize. Return value 1.,
    10/5/2017,1:37:42 AM,Information,Action start 1:37:42: ResolveSource.,
    10/5/2017,1:37:43 AM,Information,Action ended 1:37:43: ResolveSource. Return value 1.,
    10/5/2017,1:37:43 AM,Information,Action start 1:37:43: FileCost.,
    10/5/2017,1:37:43 AM,Information,Action ended 1:37:43: FileCost. Return value 1.,
    10/5/2017,1:37:43 AM,Information,Action start 1:37:43: CostFinalize.,
    10/5/2017,1:37:43 AM,Information,Action ended 1:37:43: CostFinalize. Return value 1.,
    10/5/2017,1:37:43 AM,Information,Action start 1:37:43: SetODBCFolders.,
    10/5/2017,1:37:43 AM,Information,Action ended 1:37:43: SetODBCFolders. Return value 0.,
    10/5/2017,1:37:43 AM,Information,Action start 1:37:43: SetSAUSourceListToCache.,
    10/5/2017,1:37:43 AM,Information,Action ended 1:37:43: SetSAUSourceListToCache. Return value 1.,
    10/5/2017,1:37:43 AM,Information,Action start 1:37:43: PreserveServiceArgs.,
    10/5/2017,1:37:43 AM,Information,Action ended 1:37:43: PreserveServiceArgs. Return value 1.,
    10/5/2017,1:37:43 AM,Information,Action start 1:37:43: InstallValidate.,
    10/5/2017,1:37:43 AM,Information,Action ended 1:37:43: InstallValidate. Return value 1.,
    10/5/2017,1:37:43 AM,Information,Action start 1:37:43: InstallInitialize.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: InstallInitialize. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: RemoveExistingProducts.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: RemoveExistingProducts. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SetARPINSTALLLOCATION.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SetARPINSTALLLOCATION. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: ScheduleAccountChanges.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: ScheduleAccountChanges. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: AllocateRegistrySpace.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: AllocateRegistrySpace. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: ProcessComponents.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: ProcessComponents. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: UnpublishFeatures.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: UnpublishFeatures. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: StopServices.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: StopServices. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: AutoUpdateServiceStopCheck.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: AutoUpdateServiceStopCheck. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: DeleteServices.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: DeleteServices. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: RemoveRegistryValues.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: RemoveRegistryValues. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: RemoveIniValues.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: RemoveIniValues. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: RemoveFiles.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: RemoveFiles. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: RemoveFolders.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: RemoveFolders. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: CreateFolders.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: CreateFolders. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: InstallFiles.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: InstallFiles. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SetCopyConfigFiles.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SetCopyConfigFiles. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: CopyConfigFiles.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: CopyConfigFiles. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: BindImage.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: BindImage. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: WriteRegistryValues.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: WriteRegistryValues. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: EncodeEEDataForTransport.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: EncodeEEDataForTransport. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SetModifyConfigFiles.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SetModifyConfigFiles. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: ModifyConfigFiles.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: ModifyConfigFiles. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SetManagedOnUpgrade.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SetManagedOnUpgrade. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: ManagedOnUpgrade.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: ManagedOnUpgrade. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: AccountHandlerRollbackCreateAccounts.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: AccountHandlerRollbackCreateAccounts. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: AccountHandlerCreateAccounts.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: AccountHandlerCreateAccounts. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: WriteIniValues.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: WriteIniValues. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SelfRegModules.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SelfRegModules. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: InstallServices.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: InstallServices. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SchedServiceConfig.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: RollbackServiceConfig.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: RollbackServiceConfig. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: ExecServiceConfig.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: ExecServiceConfig. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SchedServiceConfig. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SetAddProductInfoRegEntries.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SetAddProductInfoRegEntries. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: AddProductInfoRegEntries.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: AddProductInfoRegEntries. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SetAddSubscriptionInfoRegEntries.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SetAddSubscriptionInfoRegEntries. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SetConfigureSophosOverride.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SetConfigureSophosOverride. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: ScheduleSetPermissions.Deferred_x32.,
    10/5/2017,1:37:44 AM,Information,SchedulePermissionsDeferred:  Initialized.,
    10/5/2017,1:37:44 AM,Information,SchedulePermissionsDeferred:  PopulateComponentAttributeMap: Loaded components table in a table view object.,
    10/5/2017,1:37:44 AM,Information,SchedulePermissionsDeferred:  Component attributes have been loaded successfully.,
    10/5/2017,1:37:44 AM,Information,SchedulePermissionsDeferred:  Action data construction has been completed.,
    10/5/2017,1:37:44 AM,Information,SchedulePermissionsDeferred:  Action data serialization has been completed.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: SetPermissions.Deferred_x32.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: SetPermissions.Deferred_x32. Return value 1.,
    10/5/2017,1:37:44 AM,Information,SchedulePermissionsDeferred:  Custom action SetPermissions.Deferred has been scheduled.,
    10/5/2017,1:37:44 AM,Information,Action ended 1:37:44: ScheduleSetPermissions.Deferred_x32. Return value 1.,
    10/5/2017,1:37:44 AM,Information,Action start 1:37:44: StartSAUServiceRollback.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:44: StartSAUServiceRollback. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: StartSAUService.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: StartSAUService. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: SetApplyConfigWithAdapter.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: SetApplyConfigWithAdapter. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: ApplyConfigWithAdapter.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: ApplyConfigWithAdapter. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: SetServicePermissions.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: SetServicePermissions. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: StartServices.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: StartServices. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: RegisterUser.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: RegisterUser. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: RegisterProduct.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: RegisterProduct. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: PublishFeatures.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: PublishFeatures. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: PublishProduct.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: PublishProduct. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: SetRemoveTempFolders.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: SetRemoveTempFolders. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: StartMonitor.,
    10/5/2017,1:37:45 AM,Information,Action ended 1:37:45: StartMonitor. Return value 1.,
    10/5/2017,1:37:45 AM,Information,Action start 1:37:45: InstallFinalize.,
    10/5/2017,1:37:49 AM,Information,Processing product subscription in file: C:\Users\ADMIN~1.US-\AppData\Local\Temp\sophosa\sau\..\ProductID.dat,
    10/5/2017,1:37:49 AM,Information,Setting rigid name to: F26F7EC0-1302-4DA7-8B6B-A5383051D41A,
    10/5/2017,1:37:49 AM,Information,Setting tag to: ,
    10/5/2017,1:37:49 AM,Information,Setting version to: 10.7.2.3.3692.1,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  Initialized.,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  ParseObjectPermissions has been entered.,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  ApplyObjectPermissions has been entered (object name:  C:\Program Files\Sophos\AutoUpdate\).,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  ApplyObjectPermissions has been entered (object name:  C:\ProgramData\Sophos\AutoUpdate\Cache\).,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  ApplyObjectPermissions has been entered (object name:  C:\ProgramData\Sophos\AutoUpdate\data\).,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  ApplyObjectPermissions has been entered (object name:  C:\ProgramData\Sophos\Certificates\AutoUpdate\).,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  ApplyObjectPermissions has been entered (object name:  MACHINE\SOFTWARE\Sophos\AutoUpdate).,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  ApplyObjectPermissions has been entered (object name:  MACHINE\SOFTWARE\Sophos\AutoUpdate\Service).,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  ApplyObjectPermissions has been entered (object name:  MACHINE\SOFTWARE\Sophos\AutoUpdate\Service\PolicyFeatures).,
    10/5/2017,1:37:49 AM,Information,SetPermissions:  ApplyObjectPermissions has been entered (object name:  MACHINE\SOFTWARE\Sophos\Telemetry).,
    10/5/2017,1:37:49 AM,Information,No configuration file found looking for sauconf.xml,
    10/5/2017,1:37:50 AM,Information,Action ended 1:37:50: InstallFinalize. Return value 1.,
    10/5/2017,1:37:50 AM,Information,Action start 1:37:50: RegisterWithAutoUpdate.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0.,
    10/5/2017,1:37:51 AM,Information,Action ended 1:37:51: RegisterWithAutoUpdate.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0. Return value 1.,
    10/5/2017,1:37:51 AM,Information,Action ended 1:37:51: INSTALL. Return value 1.,
    

  • In reply to Phutapong Suanyim:

    Hello Pond,

    the ClientMRInit looks ok (it's from yesterday though).
    The ES setup log suggests that AutoUpdate is installed, it should download and install the other components. is this the case? Or does it fail to download (the reason would be in the ALUpdate....log under %ProgramData%\Sophos\AutoUpdate\Logs\.
    To check what RMS is doing please view the Router log under %ProgramData%\Sophos\Remote Management System\3\Router\Logs\.

    Does the registry still contain the incorrect Parent value?

    Christian

  • In reply to QC:

    Hi Christian

    Please receive my apologize from my stupid.

    That setting is come from older unmanaged Sophos Endpoint deployed via the loginscript in network. it make problem to new managed Sophos Endpoint on this computer and it change mrinit.conf and change registry key "ParentAddress" vaule and change update setting in iconn.cfg file. that why the computer cannot reach the Enterprise server and not appearing in the Console.

    Well, I have stopped Sophos endpoint deploy via loginscript and uninstall / remove all files related with Sophos endpoints. after reinstall managed Sophos installer and it works fine and appear in the Console again.

     

    thank you and very appreciated.

    Pond