Sophos Endpoint Security and Control: command line parameters used by setup.exe
You can perform customized installations of Sophos Anti-Virus, Sophos Client Firewall and Sophos NAC on Windows computers by running the setup.exe program from a command line.
The computers may or may not be managed by Enterprise Console. For more information about protecting computers that are not managed by Enterprise Console, refer to section 5 of the large networks configuration guide (Protect Windows computers without using Enterprise Console).
What to do
At each computer on which you want to install Sophos
Open a run 'Run' box, browse to setup.exe, then enter the required command line parameters as described here.
The command line parameters for setup.exe are as follows:
SETUP [-mng yes|no] [-scf] [-nac http://<NACSERVERADDRESS>] [-crt R] [-updp <path>] [-user <username>] [-pwd <password>] -mngcfg [<RMS config path>] -s -ni -?
| Parameter | Default | Description |
|---|---|---|
| -mng yes|no | yes | Is the computer to be managed? |
| -scf | Install Sophos Client Firewall (Windows 2000+) | |
| -nac http://<NACSERVERADDRESS> | Installs network access control and specifies the address of the Sophos NAC server | |
| -crt R | Removes third-party security software automatically | |
| -updp <path> | <location of setup.exe> | Location of the primary CID from where the computer will get its updates. |
| -user <username> | blank | Account for accessing the primary CID location. |
| -pwd <password> | blank | Password for the above account. |
| -ouser <username> | Obfuscated account name for accessing the CID location, if required. | |
| -opwd <password> | Obfuscated password. | |
| -mngcfg <RMS config path> | <location of Setup.exe> | Location of the RMS configuration files. |
| -s | No | Perform installation silently. |
| -ni | No | Perform a non-interactive installation. |
| -login | Start installation on Windows 95/98/Me computers from login scripts. | |
| -rlogin | Start reinstallalation on Windows 95/98/Me computers from login scripts. | |
| -? | Display command line parameter help. |
Setup.exe can return one of the following values:
| Value | Description |
|---|---|
| 0 | Installation was successful. |
| 1 | A command line parameter value is missing or an unrecognized parameter was specified. |
| 2 | Verification of the AutoUpdate package failed. The package files did not match the manifest. |
| 3 | AutoUpdate was already installed. |
| 4 | AutoUpdate does not support this operating system. |
| 5 | AutoUpdate requires Internet Explorer 5.0 or above; the system does not have this version of IE. |
| 6 | Installation of AutoUpdate failed. |
| 7 | Some file that was required could not be found e.g. an RMS configuration file or Sophos AutoUpdate.msi |
| 99 | Some other error occurred. |
Note: If you run an unknown parameter, the following error message will be displayed:
Setup
Could not find resource string 122
If you do not click 'OK', this message will close automatically after 60 seconds.
Setup.exe requires a directory named 'sau' to exist in the same directory as itself. This directory must contain a valid Sophos AutoUpdate package including manifest.dat (required by setup.exe) and cidsync.upd (required by the AutoUpdate installation).
Setup.exe creates the file 'Sophos EE setup.log' in the %TEMP% directory of each installed computer, where information and errors are logged. Information generated by the Windows Installer during the installation of AutoUpdate is also logged here. Each time setup is run, any previous log file is deleted.
An article on the Protect computers wizard gives an example of how to use the setup.exe command line parameters.
If you need more information or guidance, then please contact technical support.
- Article ID: 12570
- Created: 10 Feb 2005
- Last updated: 19 Nov 2008
