When you attempt to protect computers using Enterprise Console a yellow alert is displayed against one or more of the computers listed in the console.
When you right-click on the affected computer and go to 'View computer details' | 'Outstanding alerts', you see the message:
0000003a - Installation involves creating a scheduled task on the computer. Access was denied when creating this task. The default admin share(called C$) may not be accessible or a required service may not be running
Known to apply to the following Sophos products and versions
Enterprise Console 5.2.0
Enterprise Console 5.1.0
Enterprise Console 4.7.1
Enterprise Console 4.7.0
Enterprise Console 4.5.1
Enterprise Console 4.0.2
Enterprise Console 4.0.0
What to do
On the server running Enterprise Console:
- Open the console and right-click on the computer (or group) showing the error.
- Select 'Protect Computers'.
- Work through the wizard.
- When prompted for a username you must enter it in the format:
Note: The account you enter in the wizard must be able to logon to the management server.
- Complete the wizard.
You should now notice that orange arrows appear against the computer(s). These arrows should turn green, then turn to an hour glass and finally to a blue computer.
If the deployment task still fails ensure that the account you enter has the ability to create scheduled tasks on the target computers. E.g. Ensure that the Task Scheduler service is running, the remote computer can be resolved from the management server based on the computer name as it appears in the console and on the target computer and the local administrator group has full control to the directory: '%windir%\temp'.
For more details on how the deployment process works see article 12455.