How does the 'Protect computers wizard' perform an installation?

The 'Protect computers wizard' in Enterprise Console installs Endpoint Security and Control on Windows 2000+ computers when you move them from the unassigned folder to a group.

1. Using the target computer's Task Scheduler service, Enterprise Console creates a scheduled task, called Sophos_InstTask, on the target computer(s). This task runs as a  user that has administrative rights on the computer.
   
   
2. Upon execution, if you selected this option, the installation program will scan for, and remove, supported third-party applications.
   
   
3. Endpoint Security and Control (Sophos AutoUpdate, Sophos Remote Management System (RMS), Sophos Anti-Virus, Firewall and Compliance Control (NAC)) are installed silently from the location specified in the updating policy.
   
   
4. The 'Protect computers wizard' installs RMS before the other system components. It then installs Sophos AutoUpdate and Endpoint Security and Control.
   
   
5. The endpoint computer contacts the management server via RMS in order to get a certificate.
   
   
6. Once it has a certificate, the endpoint can then locate its update source and download the policies that it should be using.
   
   The Sophos icon (in the computer's System tray) will change from gray to blue, and will blink while it downloads policies and updates from the update location. When the Sophos shield turns solid blue, the software has been sucessfully installed on the computer.
   
   When installation is complete, the computer's details in Enterprise Console show that it is managed and its status for its policies is also shown. Any problems with installation will also be reported.