Sophos

Online support

Product maintenance

Contact support

Support services

Sophos Anti-Virus for Windows (pre-Vista): Including Sophos Anti-Virus current versions in a disk image

You can distribute the current versions of Sophos Anti-Virus for Windows 2000+, Sophos Anti-Virus for Windows NT and Sophos Anti-Virus for Windows 95/98/Me as part of a disk image.

What to do

Making a disk image

  1. Install Sophos Anti-Virus on the template computer (the computer from which you are going to take the image). You can perform the installation from Enterprise Console or by running setup.exe from the Central Installation Directory.
    For more information on how to install Sophos Anti-Virus, refer to the Sophos Anti-Virus Startup guide.
  2. Choose at what point you want to configure Sophos Anti-Virus and AutoUpdate.
    You can perform the configuration now, on the template computer. This means that the configuration you set will be conferred on all the computers that are imaged from it.
    Alternatively, you can perform configuration after the image has been put on the computers and they have been joined to the network, at which stage they will appear in Enterprise Console.
    If you want to configure the template computer now, do one of the following:
    • use Enterprise Console to apply a policy to the template computer
    • configure Sophos Anti-Virus locally on the template computer.
    For more information on how to perform these configurations, refer to the Sophos Anti-Virus Startup guide and the Enterprise Console User manual.
  3. On the template computer, stop the following services (if they are present):
    • Sophos Message Router
    • Sophos Agent
    • Sophos AutoUpdate Service
  4. Read the Microsoft warning about editing the registry.
  5. On the template computer, in turn, open each of the following registry keys (if they are present):
    • [HKEY_LOCAL_MACHINE\Software\Sophos\ALC Agent\Private]
    • [HKEY_LOCAL_MACHINE\Software\Sophos\Messaging System\Router\Private]
    • [HKEY_LOCAL_MACHINE\Software\Sophos\Remote Management System\ManagementAgent\Private]
    and, in each key, delete the following two entries
    • pkc
    • pkp
    Note: These keys must not be removed from a server running Enterprise Console.
  6. Delete the following files from the template computer:
    C:\Program Files\Sophos\AutoUpdate\Data\Status\status.xml
    C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\Config\Machine.xml
  7. Make the image of your template computer, using your usual imaging software. Then place the image on the target computers as required.
  8. When you have put the image on to a computer and joined it to the network, it will automatically appear in the Enterprise Console listed by its new name.
  9. If necessary, and if you did not configure SophosAnti-Virus on the template computer (see step 2 above), when the newly imaged computers appear in Enterprise Console, you can put them into groups and configure them centrally.

Changed SID values and Sophos Anti-Virus

You could encounter errors in Enterprise Console, or on an individual computer, when using a disk image containing Sophos Anti-Virus for Windows 2000+ if you changed the security identifier (SID) value during the imaging process.

On a computer where the SID value has been changed, open a command prompt and type the following command:

MsiExec.exe /i "c:\Program Files\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi" REINSTALL=ALL REINSTALLMODE=voums UPDATEDRIVERS=0 /l*v c:\msi.log /qb

On Windows Vista the command is:

MsiExec.exe /i "c:\ProgramData\Sophos\AutoUpdate\cache\savxp\Sophos Anti-Virus.msi" REINSTALL=ALL REINSTALLMODE=voums UPDATEDRIVERS=0 /l*v c:\msi.log /qb

The above commands should be on one line.

If you have used another drive, or non-default path, use that instead of the one mentioned above.

If you need more information or guidance, then please contact technical support.