Installation and configuration changes for Sophos Anti-Virus for Windows 2000+ on a Remote Desktop Services server
First seen in
Sophos Anti-Virus for Windows 2000+ 7.6.21
Note: As of Windows Server 2012 Terminal Servers have been renamed to Remote Desktop Services Servers
What To Do
1. Put the computer in to install mode (Windows 2000 Only)
Before you install Sophos Anti-Virus on a Windows 2000 Terminal Server you must ensure that the computer is in install mode (Windows 2003 and above does not require you to manually switch to install mode).
Please see Microsoft KBA 320185 and the section marked 'To Switch Terminal Services to Install Mode' on how to switch to install mode.
Once the installation has been completed, change the Terminal Server back to execute mode following the titled section 'To Switch Terminal Services to Execute Mode'.
Remote Desktop Services Servers can be deployed to using the protect computers wizard in the Sophos Console. There are no special considerations
3. Sophos AutoUpdate System Tray Icon
It maybe desirable to disable the Sophos AutoUpdate shield icon is disabled on a Remote Desktop Services Servers (Citrix based environments may also benefit), this will save system memory in each user session.
Note: The updates will continue in the background without the shield icon present, but desktop messaging balloons from Sophos will be unavailable. You will also not be able to locally view any Update settings within the Sophos GUI while this option is enabled. You would continue to configure Update settings via the AutoUpdate policy within your Enterprise Console.
To disable the Sophos AutoUpdate shield do one of the following:
- Browse to the following location:
Windows 2000/2003 (x86): "C:\Program Files\Sophos\AutoUpdate\Config"
Windows 2003 (x64): "C:\Program Files (x86)\Sophos\AutoUpdate\Config"
Windows 2008 and above (x86 and x64): "C:\ProgramData\Sophos\AutoUpdate\Config"
- Open 'imon.cfg' in Notepad, and change the value of:
AllowMonitorToRun = 1
AllowMonitorToRun = 0
- Save the file.
- Upon next logon the shield icon should not be present in the system tray area.