EM Library: significant files and registry entries

EML Exp.exe

SiteMan.ocx

SSData.idx

Dllloader.exe downloads .dat files from the network to the library and updates the CIDs.

Location: C:\program files\Sophos Enterprise Manager\Library\bin\dllloader.exe

User/Account: dllloader.exe runs as the user set in ‘EM Library account for services’, which is the global account that EM Library uses when creating CIDs.

The account should have at least local administrative rights and it is advisable to give the account ‘logon as a batch job’ rights.

• If EM Library is maintaining a central installation on a remote machine, this global account requires sufficient privileges to write files to that remote location, unless you set the authentication at a CID level and choose to use different credentials.
• In the case of a child library where the update location is a UNC path, this account requires the ability to read files from the remote library share (typically \\<server>\SophosEM\).
• The account can be in the format <domain>\<account> and is recommended where possible to avoid ambiguity, especially when EM Library is required to write files to another machine.
  

To change the user or password in the 'EM Library account for services':

1. Open EM Library console.
2. From the Tools menu select Options, and click on the Security tab.

For more information about EM Library user accounts, see EM Library: accounts and shares created during setup.

This command line utility is used for:

• launching library updates
• backing up and restoring EM Library configurations
• reporting to the Enterprise Console what packages the library is subscribed to (when used in conjunction with the EM Library Update agent).
  

Location: C:\program files\Sophos Enterprise Manager\Library\bin\EMLExp.exe

Launching Library Updates
To launch an update of a library using EMLExp.exe at the command line use this command:
EMLExp.exe update \\<Server>\SophosEM

For full information on the switches that can be used with EMLExp.exe run: EMLExp.exe /?

An example of this functionality would be to initiate the update of a child library after the parent library had updated. This would help to minimise the time taken for updates to filter down from parent to child. There is a sample batch file that illustrates this, named upd_lib.bat in: C:\program files\Sophos Enterprise Manager\Library\bin\

It also highlights the use of two additional registry keys:
• HKLM\SOFTWARE\sophos\Enterprise Manager\enablescript = 1 (DWORD)
• HKLM\SOFTWARE\sophos\Enterprise Manager\scriptpath = <path> (SZ)

Where:
<path> is typically: C:\Program files\sophos enterprise manager\library\bin\upd_lib.bat

Backing up and restoring EM Library Configurations
Use the following commands to:

Back up: EMLExp.exe export \\<Server>\SophosEM c:\emlexp.xml
Restore: EMLExp.exe import \\<Server>\SophosEM c:\emlexp.xml

Where:
• <Server> - is the name of the computer running EM Library
• SophosEM - is the name of the library share.

Note: A backup can prove worthwhile if there is a considerable amount of configuration in the library, i.e. multiple schedules or many CIDs.

For more information on EMLExp.exe, see EM Library: exporting and importing library settings.

This file provides the graphical interface to EM Library.

Location: C:\program files\Sophos\Enterprise Manager\console\bin\SiteMan.ocx

As a test to ensure the OLE Control Extension (ocx) is registered, place the following lines in an html file and open it with Internet Explorer:
<object classid="clsid:221FD5C415A640BBA0EEBDEE4FD83B2B”>
<object classid="clsid:E8779EDF20734F70966CB65D8E808738">

This should reveal the same graphical interface as seen in the EM Library Console.

If it does not, ensure the following registry keys exist:
HKCR\CLSID\{221FD5C415A640BBA0EEBDEE4FD83B2B}
HKCR\CLSID\{E8779EDF20734F70966CB65D8E808738}

If they don't, the ocx file is not registered. To register them, run:
Regsvr32.exe "C:\program files\Sophos\Enterprise Manager\console\bin\siteman.ocx"

This file is used to store the update schedule configured by the user.

Location: C:\program files\Sophos Enterprise Manager\Library\bin\SSData.idx

See EM Library: scheduler service fails to start for help with troubleshooting this file.

Service for EM Library (service name “SEMScheduler”). This service is required for:

• running scheduled updates
• connecting via the EM Library Console.
  

Location: C:\program files\Sophos Enterprise Manager\Library\bin\Schdsrvc.exe

These files are downloaded by dllloader.exe from the Sophos databank. Each file represents one file in the CIDs maintained by EM Library.

Location: C:\program files\Sophos Enterprise Manager\Library\files\xxxxxxxx.dat

These are the EM Library database files; they contain library configuration details.

Location: C:\program files\Sophos Enterprise Manager\Library\index\00000000.db
to: C:\program files\Sophos Enterprise Manager\Library\index\0000000A.db

This file is the Sophos EM Library plug-in for the Microsoft Management Console.

Location: C:\Program Files\Sophos\Enterprise Manager\console\bin\siteman.dll

These files reference the current database file in use by EM Library.

Location: C:\program files\Sophos Enterprise Manager\Library\index\db.inf
and: C:\program files\Sophos Enterprise Manager\Library\index\db2.inf

EM Library: library reported as inaccessible shows a practical use of these files during troubleshooting.

This file provides the event messages that are written to the application event log.

Location: C:\Program Files\Sophos Enterprise Manager\common\bin\statmsg.dll