Sophos

Online support

Product maintenance

Contact support

Support services

EM Library: changing the CID and Updating Policy details

Issue
How to move the update source for Sophos Anti-Virus client computers that update from a CID that is going to be decommissioned.

Sophos product and version
EM Library 1.3

Operating system
Windows 2003

What to do

The following procedure describes how to use Enterprise Console to move the clients to a new group which directs the clients to an alternative updating location.

1. Establish and configure a new Central Installation Directory
Do this using EM Library, based on the same package for Sophos Anti-Virus as the clients have currently:

  1. Go to EM Library|Packages|Subscribed|Select appropriate package and right-click 'Add/configure CID...'.
  2. Accept the prompt that you are creating a second CID, and configure it by defaults - but use the new location.
  3. Update the CID from the Central Installations listing (again, right-click to get menu option).
  4. Verify in the Message Log that the update in fact succeeded on the CID.

2.  Change the specified updating Policy to reflect the new update location
The Group layout does not have to change. In Enterprise Console, locate the appropriate Group(s) and change the updating policy to reflect the new CID location:

  1. Select group, right-click and choose 'View group policy details'.
  2. Take note of the updating policy in particular ('OK' out of window).
  3. Right-click the noted updating policy in the Policies listing and choose 'View/Edit policy ...'.
  4. Choose 'Configure' for appropriate OS.  In the new window, you should now be able to change the updating source from the previous to the new CID.  None of the other details should need to be changed.
  5. Confirm groups affected, and close the dialogue(s).

At this point, the Console should show the clients in this Group as having an 'Unknown policy' for Updating. This should change, as the new details are rolled out to the clients via Remote Management Service (RMS). The clients should then show the new source for updating in their AutoUpdate property windows (right-click shield for option to 'configure updating'). Their next updates should occur from the new CID.

Once successful updates are confirmed, the old CID server can be decommissioned. The simplest method is to initially choose to remove the InterChk share as it exists, in order to 'bump' any clients wrongly using it off the share:

C:\Program Files\Sophos Sweep for NT - right-click directory | Properties | Sharing | 'Do not share'

The old location directory can be deleted afterwards.

If you need more information or guidance, then please contact technical support.