04 May 2011

Sophos Endpoint Protection command line installation paramaters

I always end up looking for this...
http://www.sophos.com/support/knowledgebase/article/12570.html

These installation options are normally only configured for automated or  scripted deployments.  As a result I can never remember what they are.

If you are cloning machines you can use the following scripts http://fixmyitsystem.com/2011/04/sophos-endpoint-protection-create-new.html or simply only install Sophos once the machine is unique with a configured command line.




The parameters below map to the fields from the setup gui:










Command line parameters:

Example: SETUP [-mng yes|no] [-scf] [-nac http://<NACSERVERADDRESS>] [-crt R] [-updp <path>] [-user <username>] [-pwd <password>] [-mngcfg <RMS config path>] [-compname <computername>] [-compdesc <computerdescription>] [-domain <domainname>] [-G <groupname>] -s -ni -?


Parameter

Default

Description

-mng yes|no

yes

Is the computer to be managed?

-scf

Install Sophos Client Firewall
(Windows 2000+)

-nac
http://<NACSERVERADDRESS>

Installs network access control and
specifies the address of the Sophos NAC server

-crt R

Removes third-party security
software automatically

-updp
<path>

<location of setup.exe>

Location of the primary CID from
where the computer will get its updates.

-user <username>

blank

Account for accessing the primary
CID location.

-pwd
<password>

blank

Password for the above account.

-ouser
<username>

Obfuscated account name for
accessing the CID location, if required.

-opwd
<password>

Obfuscated password.

-mngcfg
<RMS config path>

<location of Setup.exe>

Location of the RMS configuration
files.

-compname
<computername>

Specify a
computer name to override the one used in Windows. This name will appear in
Enterprise Console.
Notes:
*     
The name must be shorter than 31 characters.
*     
If you would like to include a space, it must be
enclosed in "double quotes".

-compdesc <computerdescription>

Specify a computer description to override the one used in Windows.
This description will appear in Enterprise Console.

-domain <domainname>

Specify a domainname to override that on the
client. This name will appear in Enterprise Console.

-G \<nameofserver>\<Groupname>

Specifies the
group (set up in Enterprise Console) to which the computer will belong.



The path:
*     
is case sensitive
*     
must not end in a backslash
*     
must include the management server
*     
must be enclosed in "double quotes" if
switches (backslashes) are used
Example:
"\[SecServerName]\TopLevelGroup\Group"

-rlogin

Start reinstallalation on Windows 95/98/Me
computers from login scripts.

-login

Start installation on Windows 95/98/Me computers from login scripts.

-s

No

Perform installation silently.

-ni

No

Perform a non-interactive installation.

-?

Display command line parameter help.

Setup.exe can return one of the following values:


Value

Description

0

Installation was successful.

1

A command line parameter value is
missing or an unrecognized parameter was specified.

2

Verification of the AutoUpdate package failed. The package files did not
match the manifest.

3

AutoUpdate was already
installed.

4

AutoUpdate does not support
this operating system.

5

AutoUpdate requires
Internet Explorer 5.0 or above; the system does not have this version of IE.

6

Installation of AutoUpdate
failed.

7

Some file that was required could
not be found e.g. an RMS configuration file or Sophos AutoUpdate.msi

99

Some other error occurred.






No comments:

Post a Comment