Unable to install agent Sophos Central in Windows Server 2008 Service Pack 2 - The Setup doesn't start.

Can you run Process Monitor when you run it to gain any insight?

I know some of these are basic but you never know.

• Is there any other protections in place like another AV or some type of Group Policy preventing EXE from being ran?
  •  social.technet.microsoft.com/.../how-to-disable-exe-files-on-a-server
• Are you sure this is a Server Installer and not a Workstation Installer?
• Have you tried re-downloading the installer?
• Attempted to install from elevated command prompt?
• Right Click installer and check to unblock file?
  • blogs.msdn.microsoft.com/.../

Hello Jak,

Yes, i tried it but nothing.

I'm not sure you have the correct tool.  I was referring to:

https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

Have you ensured the computer is fully up to date with patches seeing as it's 2008 Server.  If I had to guess I suspect it's a root certificate update that is required.  Something along those lines.

Regards,

Jak

Hi Badrobot,

About your questions:

Is there any other protections in place like another AV or some type of Group Policy preventing EXE from being ran?

• Don't exist GPO for preventing exe from being ran and the server had the agent of SEC installed.

Are you sure this is a Server Installer and not a Workstation Installer?

• Yes, I'm sure

Have you tried re-downloading the installer?

• Yes I tried and nothing.

Attempted to install from elevated command prompt?

• Yes, i tried in the post before.

Right Click installer and check to unblock file?

• It's not the case

Hi Jak,

I'm understand but i don't have that tool installed in that server.

P.S: doesn't reflect information about it.

Thanks for your help.

Kind regards,

Manuel.

Procmon will help to narrow down what is happening in the background when you click on the installer.

But first, I am curious and I think it would help, can you install and exe? Maybe there is a application you know is safe that has an exe installer and you can install and uninstall it just to check.  It would be nice to determine if it is specifically related to sophos or something else.

Also, are you using a local admin or domain admin or a user account belonging to domain or local admins?  

And 

One more thought, have you tried running SFC /SCANNOW to see if any Window System files have become corrupted?  

I've updated my previous comment to suggest ensuring the computer is fully up to date with Windows Updates.  In particular ensure any root certs have been updated.

Hi Badrobot,

I installed Procmon in that server and this was found:

I am installing the Setup with a domain user member of the administrator group.