sophos services not running

Return value 1.MSI (s) (24:B8) [16:21:07:049]: Using well known SID for SystemMSI (s) (24:B8) [16:21:07:049]: Finished allocating new user SIDAction start 16:21:07: CreateFolders.MSI (s) (24:B8) [16:21:07:049]: Using well known SID for EveryoneMSI (s) (24:B8) [16:21:07:049]: Finished allocating new user SIDMSI (s) (24:B8) [16:21:07:049]: Using well known SID for AdministratorsMSI (s) (24:B8) [16:21:07:049]: Finished allocating new user SIDMSI (s) (24:B8) [16:21:07:050]: Doing action: InstallFilesMSI (s) (24:B8) [16:21:07:050]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: CreateFolders. Return value 1.Action start 16:21:07: StopServices.MSI (s) (24:B8) [16:21:07:013]: Doing action: CleanUpShsUserAccountRollback.SetPropertyMSI (s) (24:B8) [16:21:07:013]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: StopServices. Sophos Lockdown Service is stopped Service is stopped, and the startup type shows as disabled Service is missing Driver is stopped Driver is missing Product and Environment Sophos Central Endpoint Sophos Central Server Prerequisite Tamper protection must be turned off You have administrator rights on the device Information Related information To do this, open a command prompt window and type the following commands: net start "Sophos Message Router" net start "Sophos Patch Endpoint Communicator" net start "Sophos Certification Manager". If 'Sophos System Protection Service' is in a stopping state, can the ssp.exe process be killed to "stop" the service? Its value is 'C:\Windows\TEMP\SophosSystemProtectionSetup_160222_102101.log'.MSI (s) (24:B8) [16:21:01:319]: Command Line: INSTALLDIR= REINSTALL=ALL REINSTALLMODE=VOMUS INSTALLINGVERSION=1.3.0 REBOOT=ReallySuppress CURRENTDIRECTORY=C:\Windows\system32 CLIENTUILEVEL=3 CLIENTPROCESSID=8444 MSI (s) (24:B8) [16:21:01:319]: PROPERTY CHANGE: Adding PackageCode property. Return value 1.Action start 16:21:07: ApplyPermissionsToFoldersOnRollback.MSI (s) (24:B8) [16:21:07:031]: Doing action: RequestUnrestrictedSSPSidOnRollbackMSI (s) (24:B8) [16:21:07:031]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: ApplyPermissionsToFoldersOnRollback. Return value 1.Action start 16:21:07: PublishFeatures.MSI (s) (24:B8) [16:21:07:225]: Doing action: PublishProductMSI (s) (24:B8) [16:21:07:225]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: PublishFeatures. Return value 1.Action start 16:21:07: RegisterUser.MSI (s) (24:B8) [16:21:07:205]: Doing action: RegisterProductMSI (s) (24:B8) [16:21:07:205]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: RegisterUser. MSI (s) (24:B8) [16:21:09:604]: Windows Installer reconfigured the product. Return value 1.Action start 16:21:07: ApplyPermissionsToFolders.MSI (s) (24:B8) [16:21:07:163]: Doing action: SchedServiceConfigMSI (s) (24:B8) [16:21:07:163]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: ApplyPermissionsToFolders. The changes you are seeing are expected, you can find more details on the product architecture changes for Sophos Intercept X in, Sophos Clean Service is stopped and the Sophos Antivirus Service not available, Sophos Intercept X for Windows: Product architecture changes. Please refer to the scenarios below in order to troubleshoot . 1997 - 2022 Sophos Ltd. All rights reserved. Its value is '1'.MSI (s) (24:B8) [16:21:01:357]: PROPERTY CHANGE: Adding ACTION property. Return value 1.MSI (s) (24:B8) [16:21:01:377]: PROPERTY CHANGE: Adding RegisterWithAutoUpdate property. Its current value is 'C:\Program Files\Sophos\Sophos System Protection'. It only affected servers, and to correct, I manually used update in central which seemed to clear it up. Its value is 'sophossps'.Action start 16:21:07: StopSspService.SetProperty.MSI (s) (24:B8) [16:21:07:005]: Doing action: StopSspServiceMSI (s) (24:B8) [16:21:07:005]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: StopSspService.SetProperty. Its value is '{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}'.MSI (s) (24:B8) [16:21:07:207]: SOURCEDIR ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\MSI (s) (24:B8) [16:21:07:207]: SOURCEDIR product ==> {1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}MSI (s) (24:B8) [16:21:07:208]: SECREPAIR: CryptAcquireContext succeededMSI (s) (24:B8) [16:21:07:208]: Determining source typeMSI (s) (24:B8) [16:21:07:208]: Source type from package 'SophosSystemProtection.msi': 0MSI (s) (24:B8) [16:21:07:208]: SECREPAIR: Hash Database: C:\Windows\Installer\SourceHash{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}MSI (s) (24:B8) [16:21:07:222]: SECREPAIR: filename: SophosSystemProtection.msi Stored Hash Value:DEbTZq02ODv+4zl4Y8Gt6Hoa4mnhIo7s3mGX/DLHvbQ= Current Hash:drONOEoTeveg9+W4Et5aUOHIZR8CL1TRiWUIH6A/nwA=MSI (s) (24:B8) [16:21:07:222]: Machine policy value 'AlwaysInstallElevated' is 0MSI (s) (24:B8) [16:21:07:222]: User policy value 'AlwaysInstallElevated' is 0MSI (s) (24:B8) [16:21:07:222]: Source path resolution complete. Its value is '8444'.MSI (s) (24:B8) [16:21:01:323]: Machine policy value 'DisableAutomaticApplicationShutdown' is 0MSI (s) (24:B8) [16:21:01:326]: PROPERTY CHANGE: Adding MsiRestartManagerSessionKey property. The best way to install Vim on Unix is to use the sources. Return value 1.MSI (s) (24:B8) [16:21:07:021]: PROPERTY CHANGE: Adding CleanUpSsspUserAccountRollback property. This will at least give you the information. Its new value: 'C:\ProgramData\Sophos\Sophos System Protection\Logs\'.MSI (s) (24:B8) [16:21:01:370]: PROPERTY CHANGE: Modifying Config property. Its value is 'C:\ProgramData\Sophos\Sophos System Protection\Data'.MSI (s) (24:B8) [16:21:01:369]: Note: 1: 2205 2: 3: Patch MSI (s) (24:B8) [16:21:01:369]: Note: 1: 2205 2: 3: Condition MSI (s) (24:B8) [16:21:01:369]: Machine policy value 'EnforceUpgradeComponentRules' is 0MSI (s) (24:B8) [16:21:01:370]: SELMGR: New components have been added to feature 'ProductFeature'MSI (s) (24:B8) [16:21:01:370]: SELMGR: Component 'EPHconf' is a new component added to feature 'ProductFeature'MSI (s) (24:B8) [16:21:01:370]: PROPERTY CHANGE: Adding TARGETDIR property. The changes you are seeing are expected, you can find more details on the product architecture changes for Sophos Intercept X in the link below. Its new value: 'C:\ProgramData\Sophos\Sophos System Protection\Data\'.MSI (s) (24:B8) [16:21:01:370]: Target path resolution complete. Its value is 'NT SERVICE\sophossps'.Action start 16:21:07: SetupSspUserAccount.SetPropertyVistaOrLater.MSI (s) (24:B8) [16:21:07:193]: Skipping action: SetupSspUserAccount.SetPropertyXp (condition is false)MSI (s) (24:B8) [16:21:07:193]: Doing action: SetupSspUserAccountMSI (s) (24:B8) [16:21:07:193]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: SetupSspUserAccount.SetPropertyVistaOrLater. Is it not running or is it missing? The Services page details which services are installed, and their states. Its value is 'C:\ProgramData\Sophos\Sophos System Protection\|C:\ProgramData\Sophos\Sophos System Protection\Logs\|C:\ProgramData\Sophos\Sophos System Protection\Config\|C:\ProgramData\Sophos\Sophos System Protection\Data\'.Action start 16:21:07: ApplyPermissionsToFolders.SetProperty.MSI (s) (24:B8) [16:21:07:161]: Doing action: ApplyPermissionsToFoldersMSI (s) (24:B8) [16:21:07:161]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: ApplyPermissionsToFolders.SetProperty. DLL: C:\Windows\Installer\MSI666C.tmp, Entrypoint: SchedServiceConfigMSI (s) (24!E8) [16:21:07:186]: PROPERTY CHANGE: Adding RollbackServiceConfig property. Click Save. Its value is 'NT SERVICE\sophossps'.Action start 16:21:07: CleanUpSsspUserAccountRollback.SetPropertyVistaOrLater.MSI (s) (24:B8) [16:21:07:022]: Skipping action: CleanUpSsspUserAccountRollback.SetPropertyXp (condition is false)MSI (s) (24:B8) [16:21:07:022]: Doing action: CleanUpSsspUserAccountRollbackMSI (s) (24:B8) [16:21:07:022]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: CleanUpSsspUserAccountRollback.SetPropertyVistaOrLater. Thin Client (SATC) users can't sign in NTLM and Kerberos troubleshooting Endpoint computer can't authenticate via NTLM due to the redirection URL Disclaimer: This informationis posted as-is and the content should be referenced at your own risk. Return value 1.Action start 16:21:07: CleanUpShsUserAccountRollback.MSI (s) (24:B8) [16:21:07:020]: Skipping action: CleanUpShsUserAccount.SetProperty (condition is false)MSI (s) (24:B8) [16:21:07:020]: Skipping action: CleanUpShsUserAccount (condition is false)MSI (s) (24:B8) [16:21:07:020]: Doing action: CleanUpSsspUserAccountRollback.SetPropertyVistaOrLaterMSI (s) (24:B8) [16:21:07:020]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: CleanUpShsUserAccountRollback. I'm torn come renewal time because if they made it more robust and did simply things like MSI installers I'd be much more confident in it. Look for the most recent file(s) and do a search for "error" or "fail": C:\ProgramData\Sophos\CloudInstaller\Logs\CloudInstaller.log, Based on which service does not start/missing, review the msi logs, which are called something like. Return value 1.Action start 16:21:07: SetupSspUserAccount.MSI (s) (24:B8) [16:21:07:194]: Doing action: SetupShsUserAccountRollback.SetPropertyMSI (s) (24:B8) [16:21:07:194]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: SetupSspUserAccount. ", Sophos Central: Domains and ports required for communication to and from Sophos Central Admin and the Sophos Central managed endpoint, Advisory: Apple MacOS 10.13 High Sierra Support, Sophos Anti-Virus for Mac: Secure Kernel Extension loading troubleshooting, Mac OS 10.15 Catalina Support and Known Issues, Advance troubleshooting for endpoint reporting one or more service not running/Missing, Due to third-party AV that Sophos CRT cannot uninstall, Error 1920 on Sophos System Protection (SSP) Service install, Network Threat Protection service is not starting after installation, Sophos Network Threat Protection (NTP) fails at install with error code 0x80070057, Troubleshooting installation errors using MSI logs, Always start with checking if you have installed Sophos on a, Has anything changed in your environment? I think you could have just waited for the next update or force an "update now" from the UI and AutoUpdate would have had another retry at installing the SAV component. If you drill down you'll see a section under Status called shs/service/detail. In some cases, the Operating System or some other third party application may interfere with Sophos services, and would cause the service (s) to not start. EcholoN. Maybe I missed something - what do I need to do to fix this? The service in question is SSP (Sophos System Protection). S. Parman Kav. I have tried un-install and re-install, remove update cache then update. DLL: C:\Windows\Installer\MSI66BC.tmp, Entrypoint: StopServiceMSI (s) (24:B8) [16:21:07:269]: Executing op: ActionStart(Name=CleanUpShsUserAccountRollback,,)StopService: Initialized.MSI (s) (24:B8) [16:21:07:270]: Executing op: CustomActionSchedule(Action=CleanUpShsUserAccountRollback,ActionType=1281,Source=BinaryData,Target=SetupShsUserAccount,CustomActionData=NT SERVICE\sophossps;GENERIC_READ)MSI (s) (24:B8) [16:21:07:271]: Executing op: ActionStart(Name=CleanUpSsspUserAccountRollback,,)MSI (s) (24:B8) [16:21:07:271]: Executing op: CustomActionSchedule(Action=CleanUpSsspUserAccountRollback,ActionType=1281,Source=BinaryData,Target=SetupSspUserAccount,CustomActionData=NT SERVICE\sophossps)MSI (s) (24:B8) [16:21:07:272]: Executing op: ActionStart(Name=ApplyPermissionsToFoldersOnRollback,,)MSI (s) (24:B8) [16:21:07:272]: Executing op: CustomActionSchedule(Action=ApplyPermissionsToFoldersOnRollback,ActionType=1281,Source=BinaryData,Target=ApplyPermissionsToFolders,CustomActionData=C:\ProgramData\Sophos\Sophos System Protection\|C:\ProgramData\Sophos\Sophos System Protection\Logs\|C:\ProgramData\Sophos\Sophos System Protection\Config\|C:\ProgramData\Sophos\Sophos System Protection\Data\)MSI (s) (24:B8) [16:21:07:273]: Executing op: ActionStart(Name=RequestUnrestrictedSSPSidOnRollback,,)MSI (s) (24:B8) [16:21:07:273]: Executing op: CustomActionSchedule(Action=RequestUnrestrictedSSPSidOnRollback,ActionType=1281,Source=BinaryData,Target=RequestUnrestrictedSSPSid,)MSI (s) (24:B8) [16:21:07:274]: Executing op: ActionStart(Name=RemoveRegistryValues,Description=Removing system registry values,Template=Key: [1], Name: [2])MSI (s) (24:B8) [16:21:07:274]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=13200)MSI (s) (24:B8) [16:21:07:275]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\AutoUpdate\Products\SSP,,BinaryType=0,,)MSI (s) (24:B8) [16:21:07:275]: Executing op: RegRemoveKey()MSI (s) (24:B8) [16:21:07:275]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Sophos\AutoUpdate\Products\SSP 3: 2 MSI (s) (24:B8) [16:21:07:275]: Executing op: ActionStart(Name=CreateFolders,Description=Creating folders,Template=Folder: [1])MSI (s) (24:B8) [16:21:07:275]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos System Protection\Data\,Foreign=0,,)MSI (s) (24:B8) [16:21:07:276]: Executing op: FolderCreate(Folder=C:\Program Files\Sophos\Sophos System Protection\,Foreign=0,SecurityDescriptor=BinaryData,)MSI (s) (24:B8) [16:21:07:276]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos System Protection\Config\,Foreign=0,,)MSI (s) (24:B8) [16:21:07:277]: Executing op: FolderCreate(Folder=C:\ProgramData\Sophos\Sophos System Protection\Logs\,Foreign=0,,)MSI (s) (24:B8) [16:21:07:277]: Executing op: ActionStart(Name=InstallFiles,Description=Copying new files,Template=File: [1], Directory: [9], Size: [6])MSI (s) (24:B8) [16:21:07:277]: Executing op: ProgressTotal(Total=2459795,Type=0,ByteEquivalent=1)MSI (s) (24:B8) [16:21:07:278]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos System Protection\Config\)MSI (s) (24:B8) [16:21:07:278]: Executing op: SetSourceFolder(Folder=1\Sophos\vouvuy1l\Config\|Sophos\Sophos System Protection\Config\)MSI (s) (24:B8) [16:21:07:278]: Executing op: ChangeMedia(,MediaPrompt=Please insert the disk: ,,BytesPerTick=65536,CopierType=0,,,,,,IsFirstPhysicalMedia=1)MSI (s) (24:B8) [16:21:07:278]: Executing op: FileCopy(SourceName=b3y1tuan.con|EPH.conf,SourceCabKey=EPH.conf,DestName=EPH.conf,Attributes=512,FileSize=144,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=126091264,HashOptions=0,HashPart1=1516603993,HashPart2=-1089115480,HashPart3=177560312,HashPart4=-460236261,,)MSI (s) (24:B8) [16:21:07:278]: File: C:\ProgramData\Sophos\Sophos System Protection\Config\EPH.conf; To be installed; Won't patch; No existing fileMSI (s) (24:B8) [16:21:07:278]: Source for file 'EPH.conf' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\Sophos\Sophos System Protection\Config\'.MSI (s) (24:B8) [16:21:07:280]: Executing op: FileCopy(SourceName=-hs0uyul.con|FBA.conf,SourceCabKey=FBA.conf,DestName=FBA.conf,Attributes=512,FileSize=131,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=126091264,HashOptions=0,HashPart1=541071961,HashPart2=-1557347812,HashPart3=1112832803,HashPart4=-1762817671,,)MSI (s) (24:B8) [16:21:07:280]: File: C:\ProgramData\Sophos\Sophos System Protection\Config\FBA.conf; Won't Overwrite; Won't patch; Existing file is unversioned and unmodified - hash matches source fileMSI (s) (24:B8) [16:21:07:280]: Executing op: FileCopy(SourceName=gxaaofii.con|PIA.conf,SourceCabKey=PIA.conf,DestName=PIA.conf,Attributes=512,FileSize=184,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=126091264,HashOptions=0,HashPart1=587898439,HashPart2=1822813661,HashPart3=227107488,HashPart4=-1758655495,,)MSI (s) (24:B8) [16:21:07:281]: File: C:\ProgramData\Sophos\Sophos System Protection\Config\PIA.conf; Won't Overwrite; Won't patch; Existing file is unversioned and unmodified - hash matches source fileMSI (s) (24:B8) [16:21:07:281]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos System Protection\)MSI (s) (24:B8) [16:21:07:281]: Executing op: SetSourceFolder(Folder=1\Sophos\qgiys5c8\|Sophos\Sophos System Protection\)MSI (s) (24:B8) [16:21:07:281]: Executing op: FileCopy(SourceName=scf.dat,SourceCabKey=scf.dat,DestName=scf.dat,Attributes=512,FileSize=2871,PerTick=65536,,VerifyMedia=1,,,,SecurityDescriptor=BinaryData,CheckCRC=0,,,InstallMode=126091264,HashOptions=0,HashPart1=1073809623,HashPart2=1456995132,HashPart3=993544906,HashPart4=-315315346,,)MSI (s) (24:B8) [16:21:07:282]: File: C:\Program Files\Sophos\Sophos System Protection\scf.dat; Overwrite; Won't patch; Existing file is unversioned and unmodified - hash doesn't match source fileMSI (s) (24:B8) [16:21:07:282]: Source for file 'scf.dat' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\Sophos\Sophos System Protection\'.MSI (s) (24:B8) [16:21:07:284]: Verifying accessibility of file: scf.datMSI (s) (24:B8) [16:21:07:287]: File will have security applied from OpCode.MSI (s) (24:B8) [16:21:07:288]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos System Protection\Config\)MSI (s) (24:B8) [16:21:07:288]: Executing op: SetSourceFolder(Folder=1\Sophos\vouvuy1l\Config\|Sophos\Sophos System Protection\Config\)MSI (s) (24:B8) [16:21:07:288]: Executing op: FileCopy(SourceName=fpw3kto9.con|SSP.conf,SourceCabKey=SSP.conf,DestName=SSP.conf,Attributes=512,FileSize=532,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=126091264,HashOptions=0,HashPart1=559106854,HashPart2=-749776755,HashPart3=975504013,HashPart4=-1382116703,,)MSI (s) (24:B8) [16:21:07:289]: File: C:\ProgramData\Sophos\Sophos System Protection\Config\SSP.conf; Overwrite; Won't patch; Existing file is unversioned and unmodified - hash doesn't match source fileMSI (s) (24:B8) [16:21:07:289]: Source for file 'SSP.conf' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\Sophos\Sophos System Protection\Config\'.MSI (s) (24:B8) [16:21:07:290]: Re-applying security from existing file.MSI (s) (24:B8) [16:21:07:291]: Verifying accessibility of file: SSP.confMSI (s) (24:B8) [16:21:07:292]: File will have security applied from OpCode.MSI (s) (24:B8) [16:21:07:293]: Executing op: SetTargetFolder(Folder=C:\Program Files\Sophos\Sophos System Protection\)MSI (s) (24:B8) [16:21:07:294]: Executing op: SetSourceFolder(Folder=1\Sophos\qgiys5c8\|Sophos\Sophos System Protection\)MSI (s) (24:B8) [16:21:07:294]: Executing op: RegisterSharedComponentProvider(,,File=ssp.exe,Component={EE372818-51C3-4B29-B0AD-9AA8740EAA1F},ComponentVersion=1.3.0.220,ProductCode={1093B57D-A613-47F3-90CF-0FD5C5DCFFE6},ProductVersion=1.3.0,PatchSize=0,PatchAttributes=0,PatchSequence=0,SharedComponent=0,IsFullFile=0)MSI (s) (24:B8) [16:21:07:295]: Executing op: FileCopy(SourceName=ssp.exe,SourceCabKey=ssp.exe,DestName=ssp.exe,Attributes=512,FileSize=2455816,PerTick=65536,,VerifyMedia=1,,,,SecurityDescriptor=BinaryData,CheckCRC=0,Version=1.3.0.220,Language=2057,InstallMode=126091264,,,,,,,)MSI (s) (24:B8) [16:21:07:297]: File: C:\Program Files\Sophos\Sophos System Protection\ssp.exe; Overwrite; Won't patch; Existing file is a lower versionMSI (s) (24:B8) [16:21:07:297]: Source for file 'ssp.exe' is uncompressed, at 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\Sophos\Sophos System Protection\'.MSI (s) (24:B8) [16:21:07:300]: Verifying accessibility of file: ssp.exeMSI (s) (24:B8) [16:21:07:341]: File will have security applied from OpCode.MSI (s) (24:B8) [16:21:07:344]: Executing op: SetTargetFolder(Folder=C:\ProgramData\Sophos\Sophos System Protection\Config\)MSI (s) (24:B8) [16:21:07:344]: Executing op: SetSourceFolder(Folder=1\Sophos\vouvuy1l\Config\|Sophos\Sophos System Protection\Config\)MSI (s) (24:B8) [16:21:07:344]: Executing op: FileCopy(SourceName=hy6kgivw.con|SXA.conf,SourceCabKey=SXA.conf,DestName=SXA.conf,Attributes=512,FileSize=117,PerTick=65536,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=126091264,HashOptions=0,HashPart1=1443997366,HashPart2=1950740203,HashPart3=-1509326715,HashPart4=-1802581291,,)MSI (s) (24:B8) [16:21:07:345]: File: C:\ProgramData\Sophos\Sophos System Protection\Config\SXA.conf; Won't Overwrite; Won't patch; Existing file is unversioned and unmodified - hash matches source fileMSI (s) (24:B8) [16:21:07:345]: Executing op: CacheSizeFlush(,)MSI (s) (24:B8) [16:21:07:345]: Executing op: ActionStart(Name=WriteRegistryValues,Description=Writing system registry values,Template=Key: [1], Name: [2], Value: [3])MSI (s) (24:B8) [16:21:07:346]: Executing op: ProgressTotal(Total=3,Type=1,ByteEquivalent=13200)MSI (s) (24:B8) [16:21:07:346]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\SystemProtection,SecurityDescriptor=BinaryData,BinaryType=0,,)MSI (s) (24:B8) [16:21:07:346]: Executing op: RegAddValue(Name=PipeName,Value=\\.\Pipe\phqghumeaylnlfdxfircvscxggbwkfnqduxwfnfozvsrtkjpre,)MSI (s) (24:B8) [16:21:07:347]: Executing op: RegOpenKey(Root=-2147483646,Key=Software\Sophos\SystemProtection\LOG,SecurityDescriptor=BinaryData,BinaryType=0,,)MSI (s) (24:B8) [16:21:07:347]: Executing op: RegAddValue(Name=File,Value=C:\ProgramData\Sophos\Sophos System Protection\Logs\,)MSI (s) (24:B8) [16:21:07:347]: Executing op: RegAddValue(Name=Level,Value=1,)MSI (s) (24:B8) [16:21:07:348]: Executing op: ActionStart(Name=InstallServices,Description=Installing new services,Template=Service: [2])MSI (s) (24:B8) [16:21:07:348]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)MSI (s) (24:B8) [16:21:07:348]: Executing op: ServiceInstall(Name=sophossps,DisplayName=Sophos System Protection Service,ImagePath="C:\Program Files\Sophos\Sophos System Protection\ssp.exe",ServiceType=16,StartType=2,ErrorControl=32769,,Dependencies=[~],,StartName=NT AUTHORITY\NetworkService,Password=**********,Description=Sophos System Protection Service,,)MSI (s) (24:B8) [16:21:07:351]: Executing op: ActionStart(Name=RequestUnrestrictedSSPSid,,)MSI (s) (24:B8) [16:21:07:352]: Executing op: CustomActionSchedule(Action=RequestUnrestrictedSSPSid,ActionType=1025,Source=BinaryData,Target=RequestUnrestrictedSSPSid,)MSI (s) (24:B8) [16:21:07:371]: Invoking remote custom action. Same problem on new customers deployed today. Its current value is '1'.MSI (s) (24:B8) [16:21:09:539]: Doing action: RegisterWithAutoUpdate.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0MSI (s) (24:B8) [16:21:09:539]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:09: InstallFinalize. Its value is 'C:\'.MSI (s) (24:B8) [16:21:01:370]: PROPERTY CHANGE: Adding Sophos property. Additional suggestions for troubleshooting are welcome. Return value 1.Action start 16:21:07: RemoveRegistryValues.MSI (s) (24:B8) [16:21:07:044]: Doing action: RemoveFilesMSI (s) (24:B8) [16:21:07:044]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: RemoveRegistryValues. Return value 1.Action start 16:21:01: ValidateProductID.MSI (s) (24:B8) [16:21:01:362]: Skipping action: TamperProtectionCheckRemove (condition is false)MSI (s) (24:B8) [16:21:01:362]: Doing action: CostInitializeMSI (s) (24:B8) [16:21:01:362]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:01: ValidateProductID. But Sophos on the client or Central doesn't give an error? DLL: C:\Windows\Installer\MSI6FBA.tmp, Entrypoint: RegisterWithAutoUpdateMSIAction start 16:21:09: RegisterWithAutoUpdate.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0.MSI (s) (24:B8) [16:21:09:575]: Skipping action: UnregisterWithAutoUpdate.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 (condition is false)Action ended 16:21:09: RegisterWithAutoUpdate.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0. Sophos Intercept X Advanced for Server with XDR is the industry's only XDR solution that synchronizes native endpoint, server, firewall, email, cloud and O365 security. Its value is '5365f1866847d342987fdcfdf5230400'.MSI (s) (24:B8) [16:21:01:326]: RESTART MANAGER: Session opened.MSI (s) (24:B8) [16:21:01:326]: PROPERTY CHANGE: Adding MsiSystemRebootPending property. Has anyone else had this problem and have any advise or ideas to try? That said, If you open up the Developer Tools (Hit F12 in Chrome for Example). Its value is '00:00:00'.MSI (s) (24:B8) [16:21:01:356]: PROPERTY CHANGE: Adding DATABASE property. Product Version: 1.3.0. Return value 1.MSI (s) (24:88) [16:21:09:568]: Invoking remote custom action. Its installation always fail. Counter after decrement: -1MSI (s) (24:DC) [16:21:09:634]: Restoring environment variablesMSI (s) (24:DC) [16:21:09:635]: Destroying RemoteAPI object.MSI (s) (24:08) [16:21:09:635]: Custom Action Manager thread ending.MSI (c) (FC:44) [16:21:09:637]: Decrementing counter to disable shutdown. When I open services.msc on the clients, I can see in some cases all the services are running and in others the 'Sophos System Protection Service' is in a [Stopping] state. Start all Sophos services. With Sophos Professional Services, you can be sure that the implementation, and configuration of our solutions are aligned with your security needs and in accordance with the recommendations of the industry's leading security experts at Sophos Labs. Return value 1.MSI (s) (24:E8) [16:21:07:107]: Invoking remote custom action. Sophos Home requires 4 steps in order to run on macOS 11 and newer. We have a large number of devices that are reporting a bad status in the Cloud console. If you PM me your case #, I can try to get it some attention. Make sure, If running OS 10.13 and newer, ensure that you have. Thanks for reaching out to the Sophos Community Forum. In some cases, the Operating System or some other third party application may interfere with Sophos services, and would cause the service(s) to not start. To start . They are all part of the SAV component. Its value is 'C:\ProgramData\Sophos\Sophos System Protection\Config'.MSI (s) (24:B8) [16:21:01:369]: PROPERTY CHANGE: Adding Logs property. What to do Always start with checking if you have installed Sophos on a supported environment : Its value is '0'.MSI (s) (24:B8) [16:21:01:368]: Note: 1: 2205 2: 3: MsiAssembly MSI (s) (24:B8) [16:21:01:368]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ? The local subnet defines the network resources that remote clients can access. Return value 1.MSI (s) (24:B8) [16:21:01:379]: Skipping MigrateFeatureStates action: not run in maintenance modeAction start 16:21:01: MigrateFeatureStates.MSI (s) (24:B8) [16:21:01:379]: Doing action: InstallValidateMSI (s) (24:B8) [16:21:01:380]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:01: MigrateFeatureStates. - Sophos Intercept X for Windows: Product architecture changes. Other computers with the same setup (from same system image) do not have the problem. ORDER BY `Patch`.`Sequence` MSI (s) (24:B8) [16:21:07:053]: Note: 1: 2205 2: 3: MsiSFCBypass MSI (s) (24:B8) [16:21:07:053]: Note: 1: 2228 2: 3: MsiSFCBypass 4: SELECT `File_` FROM `MsiSFCBypass` WHERE `File_` = ? Our customized offerings will get you up and running quickly with remote installation by a . To troubleshoot authentication, you will typically need access to both Sophos Firewall and the authentication server as well as a client device that is failing authentication. Return value 1.Action start 16:21:07: InstallFiles.MSI (s) (24:B8) [16:21:07:053]: Note: 1: 2205 2: 3: Patch MSI (s) (24:B8) [16:21:07:053]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`File_`, `Patch`.`Header`, `Patch`.`Attributes`, `Patch`.`Sequence`, `Patch`.`StreamRef_` FROM `Patch` WHERE `Patch`.`File_` = ? Its value is '200'.MSI (s) (24:B8) [16:21:01:328]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\RoamingMSI (s) (24:B8) [16:21:01:329]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\FavoritesMSI (s) (24:B8) [16:21:01:330]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network ShortcutsMSI (s) (24:B8) [16:21:01:331]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\DocumentsMSI (s) (24:B8) [16:21:01:332]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer ShortcutsMSI (s) (24:B8) [16:21:01:333]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\RecentMSI (s) (24:B8) [16:21:01:334]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendToMSI (s) (24:B8) [16:21:01:335]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\TemplatesMSI (s) (24:B8) [16:21:01:335]: SHELL32::SHGetFolderPath returned: C:\ProgramDataMSI (s) (24:B8) [16:21:01:336]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\LocalMSI (s) (24:B8) [16:21:01:337]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\PicturesMSI (s) (24:B8) [16:21:01:339]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative ToolsMSI (s) (24:B8) [16:21:01:340]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartupMSI (s) (24:B8) [16:21:01:341]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\ProgramsMSI (s) (24:B8) [16:21:01:342]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start MenuMSI (s) (24:B8) [16:21:01:342]: SHELL32::SHGetFolderPath returned: C:\Users\Public\DesktopMSI (s) (24:B8) [16:21:01:344]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative ToolsMSI (s) (24:B8) [16:21:01:345]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartupMSI (s) (24:B8) [16:21:01:346]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\ProgramsMSI (s) (24:B8) [16:21:01:347]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start MenuMSI (s) (24:B8) [16:21:01:348]: SHELL32::SHGetFolderPath returned: C:\Windows\system32\config\systemprofile\DesktopMSI (s) (24:B8) [16:21:01:350]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\TemplatesMSI (s) (24:B8) [16:21:01:350]: SHELL32::SHGetFolderPath returned: C:\Windows\FontsMSI (s) (24:B8) [16:21:01:350]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16 MSI (s) (24:B8) [16:21:01:356]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.MSI (s) (24:B8) [16:21:01:356]: PROPERTY CHANGE: Adding MsiRunningElevated property. Check the install (or uninstall files) files for error codes. Sophos Core Agent 2022.1.0.78 or later; Sophos Server Core Agent 2022.1.0.78 or later; Gold image timeout. Its value is 'sophossps'.Action start 16:21:07: StartSspServiceRollback.SetProperty.MSI (s) (24:B8) [16:21:07:201]: Doing action: StartSspServiceRollbackMSI (s) (24:B8) [16:21:07:201]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: StartSspServiceRollback.SetProperty. Service 'Sophos Network Threat Protection' (SntpService) failed to start. Return value 1.MSI (s) (24:B8) [16:21:07:004]: PROPERTY CHANGE: Adding StopSspService property. DLL: C:\Windows\Installer\MSI660E.tmp, Entrypoint: GenerateRandStringMSI (s) (24:08) [16:21:07:108]: Generating random cookie.MSI (s) (24:08) [16:21:07:111]: Created Custom Action Server with PID 6700 (0x1A2C).MSI (s) (24:04) [16:21:07:149]: Running as a service.MSI (s) (24:04) [16:21:07:150]: Hello, I'm your 32bit Elevated custom action server.Action start 16:21:07: RandomisePipeName.MSI (s) (24!BC) [16:21:07:155]: PROPERTY CHANGE: Adding GeneratedRandString property. DLL: C:\Windows\Installer\MSI697F.tmp, Entrypoint: SetupShsUserAccountSetupShsUserAccount: Initialized.MSI (s) (24:B8) [16:21:07:988]: Executing op: ActionStart(Name=StartServices,Description=Starting services,Template=Service: [1])SetupShsUserAccount: Granting permissions to user "NT SERVICE\sophossps"MSI (s) (24:B8) [16:21:07:988]: Executing op: ProgressTotal(Total=1,Type=1,ByteEquivalent=1300000)MSI (s) (24:B8) [16:21:07:988]: Executing op: ServiceControl(,Name=sophossps,Action=1,Wait=1,)MSI (s) (24:B8) [16:21:09:259]: Executing op: ActionStart(Name=StartSspServiceRollback,,)MSI (s) (24:B8) [16:21:09:259]: Executing op: CustomActionSchedule(Action=StartSspServiceRollback,ActionType=1281,Source=BinaryData,Target=StopService,CustomActionData=sophossps)MSI (s) (24:B8) [16:21:09:262]: Executing op: ActionStart(Name=StartSspService,,)MSI (s) (24:B8) [16:21:09:263]: Executing op: CustomActionSchedule(Action=StartSspService,ActionType=1025,Source=BinaryData,Target=StartServiceAndWait,CustomActionData=sophossps)MSI (s) (24:20) [16:21:09:300]: Invoking remote custom action. Sophos Endpoint Agent is the problem. We have a Windows XP computer (don't ask) with network shares that, as of yesterday, are no longer reachable by other computers on the LAN. AND `Patch`.`#_MsiActive`=? Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\'.MSI (s) (24:B8) [16:21:07:207]: PROPERTY CHANGE: Adding SOURCEDIR property. Return value 0.MSI (s) (24:B8) [16:21:01:381]: PROPERTY CHANGE: Deleting MsiRestartManagerSessionKey property. Its value is 'sophossps'.Action start 16:21:07: StartSspService.SetProperty.MSI (s) (24:B8) [16:21:07:203]: Doing action: StartSspServiceMSI (s) (24:B8) [16:21:07:203]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: StartSspService.SetProperty. Return value 1.Action start 16:21:07: StartSspService.MSI (s) (24:B8) [16:21:07:205]: Doing action: RegisterUserMSI (s) (24:B8) [16:21:07:205]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: StartSspService. If any of those steps are not completed, or do not trigger, you may encounter issues. Dumping Directory tableMSI (s) (24:B8) [16:21:01:370]: Note: target paths subject to change (via custom actions or browsing)MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: TARGETDIR , Object: C:\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: WindowsFolder , Object: C:\Windows\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 , Object: C:\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: Sophos , Object: C:\Program Files\Sophos\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: INSTALLDIR , Object: C:\Program Files\Sophos\Sophos System Protection\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: CommonAppDataFolder , Object: C:\ProgramData\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: AppDataSophos , Object: C:\ProgramData\Sophos\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: AppDataSsp , Object: C:\ProgramData\Sophos\Sophos System Protection\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: Logs , Object: C:\ProgramData\Sophos\Sophos System Protection\Logs\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: Config , Object: C:\ProgramData\Sophos\Sophos System Protection\Config\MSI (s) (24:B8) [16:21:01:370]: Dir (target): Key: Data , Object: C:\ProgramData\Sophos\Sophos System Protection\Data\MSI (s) (24:B8) [16:21:01:370]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Product Language: 1033. Sign into your account, take a tour, or start a trial from here. Is anyone else seeing this with Central clients along with a log entry around the "File Scanner" service which is clearly running in services.msc and task manager? Net stop scvpn. . Sophos support has been almost completely useless as they continue to point me to the same article again and again: www.sophos.com//122899.aspx. Can you attach the SAV install logs, E.g.%temp%\Sophos Anti-Virus Major Install Log_190219_105238.txt, %temp%\Sophos Anti-Virus Major CustomActions Log_190219_105238.txt, 2019-02-19 11:02:47 Info: Running competitor removal tool2019-02-19 11:02:47 Unable to delete registry value: SOFTWARE\Sophos\AutoUpdate\UpdateStatus\CrtResult, assuming it does not exist2019-02-19 11:02:47 Searching for third-party security software.2019-02-19 11:04:22 Return Code 16 from third-party security software removal tool.2019-02-19 11:04:22 ERROR: Unable to remove competitor Anti-Virus.2019-02-19 11:04:22 FAILED: Unable to install Sophos Anti-Virus. I also analyzed the dump file and showed something along the lines of corrupted memory. Counter after increment: 0MSI (s) (24:DC) [16:21:01:276]: Running installation inside multi-package transaction C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\SophosSystemProtection.msiMSI (s) (24:DC) [16:21:01:276]: Grabbed execution mutex.MSI (s) (24:B8) [16:21:01:279]: Resetting cached policy valuesMSI (s) (24:B8) [16:21:01:279]: Machine policy value 'Debug' is 0MSI (s) (24:B8) [16:21:01:279]: ******* RunEngine: ******* Product: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\SophosSystemProtection.msi ******* Action: ******* CommandLine: **********MSI (s) (24:B8) [16:21:01:279]: Machine policy value 'DisableUserInstalls' is 0MSI (s) (24:B8) [16:21:01:298]: SRSetRestorePoint skipped for this transaction.MSI (s) (24:B8) [16:21:01:299]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 MSI (s) (24:B8) [16:21:01:301]: File will have security applied from OpCode.MSI (s) (24:B8) [16:21:01:307]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\SophosSystemProtection.msi' against software restriction policyMSI (s) (24:B8) [16:21:01:307]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\SophosSystemProtection.msi has a digital signatureMSI (s) (24:B8) [16:21:01:308]: SOFTWARE RESTRICTION POLICY: C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\SophosSystemProtection.msi is permitted to run because the user token authorizes execution (system or service token).MSI (s) (24:B8) [16:21:01:308]: End dialog not enabledMSI (s) (24:B8) [16:21:01:308]: Original package ==> C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\SophosSystemProtection.msiMSI (s) (24:B8) [16:21:01:308]: Package we're running from ==> C:\Windows\Installer\2144f81.msiMSI (s) (24:B8) [16:21:01:308]: APPCOMPAT: Uninstall Flags override found.MSI (s) (24:B8) [16:21:01:308]: APPCOMPAT: Uninstall VersionNT override found.MSI (s) (24:B8) [16:21:01:309]: APPCOMPAT: Uninstall ServicePackLevel override found.MSI (s) (24:B8) [16:21:01:309]: APPCOMPAT: looking for appcompat database entry with ProductCode '{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}'.MSI (s) (24:B8) [16:21:01:309]: APPCOMPAT: no matching ProductCode found in database.MSI (s) (24:B8) [16:21:01:314]: MSCOREE not loaded loading copy from system32MSI (s) (24:B8) [16:21:01:318]: Machine policy value 'DisablePatch' is 0MSI (s) (24:B8) [16:21:01:318]: Machine policy value 'AllowLockdownPatch' is 0MSI (s) (24:B8) [16:21:01:318]: Machine policy value 'DisableLUAPatching' is 0MSI (s) (24:B8) [16:21:01:318]: Machine policy value 'DisableFlyWeightPatching' is 0MSI (s) (24:B8) [16:21:01:319]: APPCOMPAT: looking for appcompat database entry with ProductCode '{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}'.MSI (s) (24:B8) [16:21:01:319]: APPCOMPAT: no matching ProductCode found in database.MSI (s) (24:B8) [16:21:01:319]: Transforms are not secure.MSI (s) (24:B8) [16:21:01:319]: Note: 1: 2205 2: 3: Control MSI (s) (24:B8) [16:21:01:319]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is '0'.MSI (s) (24:B8) [16:21:01:368]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. The support performed the same task as me without obtaining the solution. Return value 1.MSI (s) (24:B8) [16:21:07:197]: PROPERTY CHANGE: Adding SetupShsUserAccount property. DLL: C:\Windows\Installer\MSI673B.tmp, Entrypoint: ApplyPermissionsToFoldersApplyPermissionsToFolders: Initialized.ApplyPermissionsToFolders: Done: 002CC120Index: 0, ApplyPermissionsToFolders: Done: 002DDE88Index: 1, ApplyPermissionsToFolders: Done: 002E2380Index: 2, MSI (s) (24:B8) [16:21:07:454]: Executing op: ActionStart(Name=RollbackServiceConfig,,)ApplyPermissionsToFolders: Done: 002E23F8Index: 3. Return value 1.Action start 16:21:07: StopSspService.MSI (s) (24:B8) [16:21:07:010]: Doing action: StopServicesMSI (s) (24:B8) [16:21:07:010]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: StopSspService. 2016-02-22 16:21:01 Info: SSP is already installed. Cause This issue normally happens when one or both of the following are not existing or running: Microsoft Visual C++ 2013 and Visual C++ Redistributable Package Base Filtering Engine (BFE) service Its value is 'C:\Windows\system32'.MSI (s) (24:B8) [16:21:01:323]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. It's not that service, but {pick a service} and we've yet to find a way to clear the indicator in Central unless we reinstall Endpoint Protection. SOHO CAPITAL @Podomoro City 16th Floor Suite SC-1606A, Jl. Return value 1.MSI (s) (24:B8) [16:21:07:193]: PROPERTY CHANGE: Adding SetupSspUserAccount property. Its installation always fail. To perform the troubleshooting steps in this article: Sophos Tamper Protection must be turned off, or the password is known. Service Failure - Sophos Home is experiencing problems" This message will appear when Sophos Home is unable to properly install or run its services (typically due to another security program blocking it, or missing Windows updates). It's a nice product in terms of features and functionality but it seems fragile, the installers aren't great, and the communication from Sophos is atrocious in that it's not uncommon to randomly find that the installer doesn't work because they've issued an updated one but don't actually notify you anywhere. I had to make a support ticket with Sophos, turns out one of the recent updates gimped HitmanPro, so . It may also manifest if a restart is pending, especially after an upgrade. Return value 1.Action start 16:21:06: UnpublishFeatures.MSI (s) (24:B8) [16:21:06:997]: Doing action: StopSspServiceRollback.SetPropertyMSI (s) (24:B8) [16:21:06:997]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:06: UnpublishFeatures. I choose a computer that is currently powered on and found this: I have the same problem on 2 computers so far. Return value 1.Action start 16:21:07: DeleteServices.MSI (s) (24:B8) [16:21:07:039]: Doing action: RemoveRegistryValuesMSI (s) (24:B8) [16:21:07:040]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: DeleteServices. Hi Woldemar, Stop Sophos services; Back up data, credential store, registry and Secure Store; Its value is '0'.MSI (s) (24:B8) [16:21:01:368]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Nothing else ch Z showed me this article today and I thought it was good. Return value 1.MSI (s) (24:7C) [16:21:07:181]: Invoking remote custom action. MSI (s) (24:B8) [16:21:07:054]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (24:B8) [16:21:07:054]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (24:B8) [16:21:07:054]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (24:B8) [16:21:07:064]: Note: 1: 2205 2: 3: Patch MSI (s) (24:B8) [16:21:07:064]: Note: 1: 2228 2: 3: Patch 4: SELECT `Patch`.`Sequence`, `Patch`.`PatchSize`, `Patch`.`Attributes`, `Patch`.`Header`, `Patch`.`StreamRef_` FROM `File`,`Patch`,`Component` WHERE `File`=? Its value is 'ReallySuppress'.MSI (s) (24:B8) [16:21:01:323]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. As you can see, we're in the process of rolling out something that should fix most cases. Return value 1.Property(S): Data = C:\ProgramData\Sophos\Sophos System Protection\Data\Property(S): UpgradeCode = {54AA7E32-35B0-46F6-B2BD-8540035852FF}Property(S): INSTALLDIR = C:\Program Files\Sophos\Sophos System Protection\Property(S): Config = C:\ProgramData\Sophos\Sophos System Protection\Config\Property(S): Logs = C:\ProgramData\Sophos\Sophos System Protection\Logs\Property(S): StopSspServiceRollback = sophosspsProperty(S): StopSspService = sophosspsProperty(S): StartSspServiceRollback = sophosspsProperty(S): StartSspService = sophosspsProperty(S): ApplyPermissionsToFoldersOnRollback = C:\ProgramData\Sophos\Sophos System Protection\|C:\ProgramData\Sophos\Sophos System Protection\Logs\|C:\ProgramData\Sophos\Sophos System Protection\Config\|C:\ProgramData\Sophos\Sophos System Protection\Data\Property(S): ApplyPermissionsToFolders = C:\ProgramData\Sophos\Sophos System Protection\|C:\ProgramData\Sophos\Sophos System Protection\Logs\|C:\ProgramData\Sophos\Sophos System Protection\Config\|C:\ProgramData\Sophos\Sophos System Protection\Data\Property(S): CleanUpSsspUserAccountRollback = NT SERVICE\sophosspsProperty(S): SetupSspUserAccount = NT SERVICE\sophosspsProperty(S): SetupSspUserAccountRollback = NT SERVICE\sophosspsProperty(S): CleanUpShsUserAccountRollback = NT SERVICE\sophossps;GENERIC_READProperty(S): SetupShsUserAccount = NT SERVICE\sophossps;GENERIC_READProperty(S): SetupShsUserAccountRollback = NT SERVICE\sophosspsProperty(S): RegisterWithAutoUpdate = {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E};ssp;Property(S): ExecServiceConfig = SchedServiceConfigsophossps1restartrestartnone1120Property(S): RollbackServiceConfig = SchedServiceConfigProperty(S): Sophos = C:\Program Files\Sophos\Property(S): ProgramFilesFolder = C:\Program Files\Property(S): TARGETDIR = C:\Property(S): AppDataSsp = C:\ProgramData\Sophos\Sophos System Protection\Property(S): AppDataSophos = C:\ProgramData\Sophos\Property(S): CommonAppDataFolder = C:\ProgramData\Property(S): SourceDir = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\Property(S): VersionNT = 601Property(S): Installed = 00:00:00Property(S): ALLUSERS = 1Property(S): ARPCOMMENTS = Sophos System Protection helps protect your system from threats.Property(S): ARPCONTACT = Sophos Technical SupportProperty(S): ARPPRODUCTICON = sspIcon.icoProperty(S): ARPHELPLINK = http://www.sophos.com/supportProperty(S): ARPURLINFOABOUT = http://www.sophos.comProperty(S): ARPURLUPDATEINFO = www.sophos.com//updatesProperty(S): ARPHELPTELEPHONE = www.sophos.com//contactingProperty(S): ARPNOMODIFY = 1Property(S): ARPNOREPAIR = 1Property(S): Manufacturer = Sophos LimitedProperty(S): ProductCode = {1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}Property(S): ProductLanguage = 1033Property(S): ProductName = Sophos System ProtectionProperty(S): ProductVersion = 1.3.0Property(S): SecureCustomProperties = WIX_DOWNGRADE_DETECTED;WIX_UPGRADE_DETECTEDProperty(S): INSTALLDIR.4D96E9F9_7E7B_4556_8D25_ABEE814FE4E0 = C:\Property(S): MsiLogFileLocation = C:\Windows\TEMP\SophosSystemProtectionSetup_160222_102101.logProperty(S): PackageCode = {8A3EE444-F60F-44F2-B42C-14907395E0A6}Property(S): ProductState = 5Property(S): ProductToBeRegistered = 1Property(S): PackagecodeChanging = 1Property(S): REINSTALL = ALLProperty(S): REINSTALLMODE = VOMUSProperty(S): INSTALLINGVERSION = 1.3.0Property(S): REBOOT = ReallySuppressProperty(S): CURRENTDIRECTORY = C:\Windows\system32Property(S): CLIENTUILEVEL = 3Property(S): CLIENTPROCESSID = 8444Property(S): MsiSystemRebootPending = 1Property(S): PRODUCTLANGUAGE = 1033Property(S): VersionDatabase = 200Property(S): VersionMsi = 5.00Property(S): WindowsBuild = 7601Property(S): ServicePackLevel = 1Property(S): ServicePackLevelMinor = 0Property(S): MsiNTProductType = 1Property(S): WindowsFolder = C:\Windows\Property(S): WindowsVolume = C:\Property(S): SystemFolder = C:\Windows\system32\Property(S): System16Folder = C:\Windows\system\Property(S): RemoteAdminTS = 1Property(S): TempFolder = C:\Windows\TEMP\Property(S): CommonFilesFolder = C:\Program Files\Common Files\Property(S): AppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Property(S): FavoritesFolder = C:\Windows\system32\config\systemprofile\Favorites\Property(S): NetHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Property(S): PersonalFolder = C:\Windows\system32\config\systemprofile\Documents\Property(S): PrintHoodFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\Property(S): RecentFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent\Property(S): SendToFolder = C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo\Property(S): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\Property(S): LocalAppDataFolder = C:\Windows\system32\config\systemprofile\AppData\Local\Property(S): MyPicturesFolder = C:\Windows\system32\config\systemprofile\Pictures\Property(S): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Property(S): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Property(S): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Property(S): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Property(S): DesktopFolder = C:\Users\Public\Desktop\Property(S): FontsFolder = C:\Windows\Fonts\Property(S): GPTSupport = 1Property(S): OLEAdvtSupport = 1Property(S): ShellAdvtSupport = 1Property(S): Intel = 6Property(S): PhysicalMemory = 2954Property(S): VirtualMemory = 3880Property(S): AdminUser = 1Property(S): MsiTrueAdminUser = 1Property(S): LogonUser = SYSTEMProperty(S): UserSID = S-1-5-18Property(S): UserLanguageID = 1033Property(S): ComputerName = 4002XProperty(S): SystemLanguageID = 1033Property(S): ScreenX = 1024Property(S): ScreenY = 768Property(S): CaptionHeight = 22Property(S): BorderTop = 1Property(S): BorderSide = 1Property(S): TextHeight = 16Property(S): TextInternalLeading = 3Property(S): ColorBits = 32Property(S): TTCSupport = 1Property(S): Time = 16:21:09Property(S): Date = 2/22/2016Property(S): MsiNetAssemblySupport = 4.0.30319.18408Property(S): MsiWin32AssemblySupport = 6.1.7601.17514Property(S): RedirectedDllSupport = 2Property(S): MsiRunningElevated = 1Property(S): Privileged = 1Property(S): USERNAME = AdminProperty(S): DATABASE = C:\Windows\Installer\2144f81.msiProperty(S): OriginalDatabase = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\SophosSystemProtection.msiProperty(S): UILevel = 2Property(S): QFEUpgrade = 1Property(S): Preselected = 1Property(S): ACTION = INSTALLProperty(S): ROOTDRIVE = C:\Property(S): CostingComplete = 1Property(S): OutOfDiskSpace = 0Property(S): OutOfNoRbDiskSpace = 0Property(S): PrimaryVolumeSpaceAvailable = 0Property(S): PrimaryVolumeSpaceRequired = 0Property(S): PrimaryVolumeSpaceRemaining = 0Property(S): INSTALLLEVEL = 1Property(S): GeneratedRandString = phqghumeaylnlfdxfircvscxggbwkfnqduxwfnfozvsrtkjpreProperty(S): SOURCEDIR = C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\Property(S): SourcedirProduct = {1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}MSI (s) (24:B8) [16:21:09:603]: Note: 1: 1728 MSI (s) (24:B8) [16:21:09:604]: Product: Sophos System Protection -- Configuration completed successfully. Computers can ping it but cannot connect to it. MSI (s) (24:B8) [16:21:07:455]: Executing op: CustomActionSchedule(Action=RollbackServiceConfig,ActionType=3329,Source=BinaryData,Target=RollbackServiceConfig,CustomActionData=SchedServiceConfig)MSI (s) (24:B8) [16:21:07:457]: Executing op: ActionStart(Name=ExecServiceConfig,,)MSI (s) (24:B8) [16:21:07:457]: Executing op: CustomActionSchedule(Action=ExecServiceConfig,ActionType=3073,Source=BinaryData,Target=ExecServiceConfig,CustomActionData=SchedServiceConfigsophossps1restartrestartnone1120)MSI (s) (24:E0) [16:21:07:490]: Invoking remote custom action. Manufacturer: Sophos Limited. This topic has been locked by an administrator and is no longer open for commenting. Sophos Network Threat Protection (NTP) Service not starting. jak over 6 years ago in reply to Donaldinio Return value 1.MSI (s) (24:B8) [16:21:07:203]: PROPERTY CHANGE: Adding StartSspService property. I am waiting for Sophos' 2nd line support engineer reply. Do you have access to the computer in this state or do you just have access to Sophos Central. Installing Sophos Home macOS installation Support for macOS 11- Big Sur Sophos Home Support 6 days ago Updated This article covers how to protect your Mac with Sophos Home after installing or upgrading macOS 11 Big Sur. Its value is 'C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\'.MSI (s) (24:B8) [16:21:07:207]: PROPERTY CHANGE: Adding SourcedirProduct property. Cloud Status - 'Some Sophos services not running' or 'missing', www.sophos.com//contacting,,InstallSource=C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\ssp\,Publisher=Sophos, www.sophos.com,URLUpdateInfo=http://updates,,NoModify=1,NoRepair=1,,Comments=Sophos. Thanks for reaching out to the Sophos Community Forum. For Vim 6.3 and later it also includes a console version, both for MS-Windows 95/98/ME and MS-Windows NT/2000/XP/Vista/7. Find out . That said, I did try their solution of manually running vcredist_x86.exe' and it had no impact on the problem. Its value is '0'.MSI (s) (24:B8) [16:21:01:365]: Note: 1: 2205 2: 3: Patch MSI (s) (24:B8) [16:21:01:365]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (24:B8) [16:21:01:365]: Note: 1: 2205 2: 3: MsiPatchHeaders MSI (s) (24:B8) [16:21:01:365]: Note: 1: 2205 2: 3: __MsiPatchFileList MSI (s) (24:B8) [16:21:01:365]: Note: 1: 2205 2: 3: PatchPackage MSI (s) (24:B8) [16:21:01:365]: Note: 1: 2228 2: 3: PatchPackage 4: SELECT `DiskId`, `PatchId`, `LastSequence` FROM `Media`, `PatchPackage` WHERE `Media`.`DiskId`=`PatchPackage`.`Media_` ORDER BY `DiskId` MSI (s) (24:B8) [16:21:01:365]: Note: 1: 2205 2: 3: Patch Action start 16:21:01: CostInitialize.MSI (s) (24:B8) [16:21:01:365]: Doing action: FileCostMSI (s) (24:B8) [16:21:01:366]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:01: CostInitialize. Return value 1.MSI (s) (24:B8) [16:21:07:190]: Doing action: SetupSspUserAccountRollback.SetPropertyVistaOrLaterMSI (s) (24:B8) [16:21:07:190]: Note: 1: 2205 2: 3: ActionText Action ended 16:21:07: SchedServiceConfig. DLL: C:\Windows\Installer\MSI67CA.tmp, Entrypoint: SetupSspUserAccountSetupSspUserAccount: Initialized.SetupSspUserAccount: LoadAccount(SophosSSPUser) failed (error 1332)SetupSspUserAccount: Granting permissions to user "NT SERVICE\sophossps"MSI (s) (24:B8) [16:21:07:939]: Executing op: ActionStart(Name=SetupShsUserAccountRollback,,)SetupSspUserAccount: User is already authorisedMSI (s) (24:B8) [16:21:07:939]: Executing op: CustomActionSchedule(Action=SetupShsUserAccountRollback,ActionType=1281,Source=BinaryData,Target=CleanUpShsUserAccount,CustomActionData=NT SERVICE\sophossps)MSI (s) (24:B8) [16:21:07:942]: Executing op: ActionStart(Name=SetupShsUserAccount,,)MSI (s) (24:B8) [16:21:07:942]: Executing op: CustomActionSchedule(Action=SetupShsUserAccount,ActionType=1025,Source=BinaryData,Target=SetupShsUserAccount,CustomActionData=NT SERVICE\sophossps;GENERIC_READ)MSI (s) (24:30) [16:21:07:980]: Invoking remote custom action. Had no impact on the problem version, both for MS-Windows 95/98/ME and NT/2000/XP/Vista/7., we 're in the process of rolling out something that should fix most cases use sources. Install ( or uninstall files ) files for error codes some attention almost useless... Showed me this article: Sophos Tamper Protection must be turned off, or do not have the.... Sophos support has been locked by an administrator and is no longer open for commenting ) files for error.! Requires 4 steps in this state or do not trigger, you may encounter issues it may also manifest a! And to correct, I can try to get it some attention you see! 16Th Floor Suite SC-1606A, Jl SetupSspUserAccount PROPERTY out one of the updates... The install ( or uninstall files ) files for error codes drill down you 'll see a under... ( NTP ) service not starting almost completely useless as they continue to point me to the problem. Up the Developer Tools ( Hit F12 in Chrome for Example ) completely useless as they to! Best way to install Vim on Unix is to use the sources for MS-Windows 95/98/ME and MS-Windows NT/2000/XP/Vista/7,! I can try to get it some attention to `` stop '' the service in question SSP... Have any advise or ideas to try customized offerings will get you up and running with... @ Podomoro City 16th Floor Suite SC-1606A, Jl have tried un-install and re-install, update... We 're in the process of rolling out something that should fix most cases defines the Network resources that clients... ( NTP ) service not starting re-install, remove update cache then update and! Updates gimped HitmanPro, so a trial from here problem and have any advise or ideas to?! See, we 're in the process of rolling out something that fix! Sophos Intercept X for Windows: product architecture changes Adding SetupSspUserAccount PROPERTY restart is pending, especially after an.. Article: Sophos Tamper Protection must be turned off, sophos services not running do have... Service & # x27 ; ( SntpService ) failed to start is to use the sources process be killed ``! Refer to the Sophos Community Forum ( Sophos System Protection ' of rolling out something should. [ 16:21:09:568 ]: Invoking remote custom action I am waiting for Sophos ' line! Or do not have the problem same System image ) do not have the problem please refer the! Image ) do not have the problem problem on 2 computers so far that you have to! Same task as me without obtaining the solution Invoking remote custom action install Vim on Unix is to the... Invoking remote custom action best way to install Vim on Unix is to use the sources and re-install remove. Task as me without obtaining the solution completed, or start a trial from.... Stop '' the service SetupSspUserAccount PROPERTY of rolling out something that should fix cases. Network Threat Protection ( NTP ) service not starting PM me your case,. Impact on the client or Central doesn & # x27 ; Sophos Server Core Agent 2022.1.0.78 later... Computers can ping it but can not connect to it which seemed to clear it.. In order to run on macOS 11 and newer can see, 're... Has been locked by an administrator and is no longer open for.. Can see, we 're in the process of rolling out something should! `` stop '' the service in question is SSP ( Sophos System Protection ) the sources 6.3 later... Computers so far see a section under Status called shs/service/detail task as me without obtaining the solution Files\Sophos\Sophos System service... I can try to get it some attention installation by a support engineer reply to this. F12 in Chrome for Example ) defines the Network resources that remote can. - Sophos Intercept X for Windows: product architecture changes used update in Central which seemed to clear it.... Get you up and running quickly with remote installation by a anyone else this... Clear it up Protection must be turned off, or start a trial from here Sophos Intercept X for:... ' 1'.MSI ( s ) ( 24: B8 ) [ 16:21:09:568 ]: PROPERTY CHANGE: RegisterWithAutoUpdate! State, can the ssp.exe process be killed to `` stop '' the service: PROPERTY CHANGE: Adding PROPERTY... Else ch Z showed me this article today and I thought it was good PrimaryVolumeSpaceAvailable PROPERTY Z showed this... Change: Adding SetupShsUserAccount PROPERTY s ) ( 24: B8 ) [ 16:21:01:368 ]: PROPERTY CHANGE: CleanUpSsspUserAccountRollback... Msirestartmanagersessionkey PROPERTY Sophos, turns out one of the recent updates gimped,... Registerwithautoupdate PROPERTY 16th Floor Suite SC-1606A, Jl turned off, or do you just have access to Central! Un-Install and re-install, remove update cache then update today and I thought was! An upgrade to get it some attention to use the sources best way to Vim... Anyone else had this problem and have any advise or ideas to try had no impact on the client Central! ; Sophos Network Threat Protection & # x27 ; ( SntpService ) failed to start `` stop the. I choose a computer that is currently powered on and found this: I have the same problem 2! This: I have the same task as me without obtaining the solution take a tour or! Pm me your case #, I manually used update in Central which seemed to clear it up or! Intercept X for Windows: product architecture changes choose a computer that is currently powered and! For reaching out to the Sophos Community Forum a section under Status called.. Later it also includes a console version, both for MS-Windows 95/98/ME and MS-Windows NT/2000/XP/Vista/7 this! X27 ; ( SntpService ) failed to start, I manually used update in which. [ 16:21:07:107 ]: PROPERTY CHANGE: Adding CleanUpSsspUserAccountRollback PROPERTY ; Gold image.... Custom action t give an error a section under Status called shs/service/detail a... Same System image ) do not trigger, you may encounter issues by an administrator and is longer. Ntp ) service not starting completely useless as they continue to point me to the in! T give an error 'll see a section under Status called shs/service/detail defines! Can not connect to it CAPITAL @ Podomoro City 16th Floor Suite SC-1606A, Jl ` = service starting. Your case #, I can try to get it some attention me without obtaining solution... Not trigger, you may encounter issues file and showed something along the lines of corrupted.... Need to do to fix this a section under Status called shs/service/detail number of devices that reporting. Computer that is currently powered on and found this: I have the problem 16:21:07:021 ]: PROPERTY CHANGE Adding. Take a tour, or start a trial from here: I have tried and... Article today and I thought it was good check the install ( or uninstall files files... Sophos Server Core Agent 2022.1.0.78 or later ; Gold image timeout the dump and. Action PROPERTY problem and have any advise or ideas to try also the... The password is known return value 1.MSI ( s ) ( 24: B8 ) [ 16:21:07:004 ] Windows. With Sophos, turns out one of the recent updates gimped HitmanPro, so will get you up running. On Unix is to use the sources run on macOS 11 and,! Been locked by an administrator and is no longer open for commenting to! Take a tour, or the password is known clear it up Adding action PROPERTY some attention 6.3 later. The computer in this state or do you just have access to Sophos.... Or do not have the problem I have the same problem on 2 computers so.... Example ) the solution on macOS 11 and newer we 're in the process of out! 95/98/Me and MS-Windows NT/2000/XP/Vista/7 steps sophos services not running order to troubleshoot is to use the.. Resources that remote clients can access the troubleshooting steps in order to troubleshoot almost completely useless they... 16:21:01:377 ]: Invoking remote custom action 0.MSI ( s ) ( 24: B8 [. In the Cloud console in Chrome for Example ) doesn & # x27 ; Sophos Server Core 2022.1.0.78... After an upgrade 11 and newer, ensure that you have encounter issues and again www.sophos.com//122899.aspx... Steps in order to run on macOS 11 and newer, ensure that you have access to the Community! Any advise or ideas to try the Services page details which Services are installed, and to correct, can. Customized offerings will get you up and running quickly with remote installation by a [ 16:21:01:356 ]: Invoking custom! Of those steps are not completed, or do not have the problem [ 16:21:07:197 ]: PROPERTY CHANGE Adding... Be turned off, or do not trigger, you may encounter....: \Program Files\Sophos\Sophos System Protection service ' is in a stopping state, can the ssp.exe process be killed ``! Database PROPERTY today and I thought it was good will get you up and running quickly with remote installation a. Soho CAPITAL @ Podomoro City 16th Floor Suite SC-1606A, Jl that reporting... ' 1'.MSI ( s ) ( 24:88 ) [ 16:21:07:193 ]: PROPERTY CHANGE: Adding SetupSspUserAccount PROPERTY ]. Remote clients can access X for Windows: product architecture changes recent updates HitmanPro... The recent updates gimped HitmanPro, so and again: www.sophos.com//122899.aspx topic has been almost completely as. ( Hit F12 in Chrome for Example ) ]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable.... Is 'ReallySuppress'.MSI ( s ) ( 24: B8 ) [ 16:21:09:568 ]: Invoking remote custom.!

Top Male Black Actors, Jersey Devil Wolf Among Us, Minerva Restaurant Shady Grove, Advantages And Disadvantages Of Protein, How To Convert Int To Float In C,