...
- Easiest Approach -- <Right Click> on the computer and select Comply with All Group Policies
- View Computer Details -- There are 3 areas where the computer can differ from it's policy. <Right Click> on a computer that differs from its policy and determine from the View Computer Details area which area is in violation. Once it's determined, <Right Click> on the computer, again, and direct the system to Comply With either All Group Policies, or the specific policy it is violating:
- Anti-Virus and HIPS
- Updating Policy
- Tamper Protection Status and Protection Compliance
- Differs From Policy Compliance -- If the Status of the computer shows Differs From Policy, then try moving the computer to a different group to see if it will shake up the policy compliance. If it does, you can, then try to move it back into its original group.
- A policy and policy group, Compliance Policy, has been created with a false Primary Server. Put the client into that policy group and force a "Comply with | Anti-Virus and HIPS policy"
- Once it changes to a primary server of Sophos4 (which does not exist), then put it back into its original group and force another "Comply with | Anti-Virus and HIPS policy"
- Comparison Failure -- Many times, a system may show that it fails in policy compliance with a comparison failure. This is normally a transient error, and will rectify itself within a fairly short time. However, if it does not resolve itself, perform the following steps:
- Check to local Sophos Anti-Virus Service -- It may be in a "stopped" state. Just restart it.
- Check the local Sophos Shield in the System Tray -- It may be grayed out, indicating a stopping of a Sophos Service. Start all stopped Sophos Services.
- Force the Client to comply with the Anti-Virus and HIPS policy -- *In the Enterprise Console, <Right Click>* on client and select "Comply with | Anti-Virus and HIPS policy"
- Modify items in the Task Manager
- In the Task Manager, end the SavService.exe process
- Click Start / Run and type services.msc
- <Right Click> "Sophos Anti-Virus" and select "Start" to start the service
- If this does not fix the issue, re-protect the client computer.
- Scheduled Tasks -- Many times, when it shows Differs from Policy, the problem is with the Scheduled Task being applid to the system. Remote to the local system and determine whether or not the policy shows in the Sophos Endpoint Security and Control client that was installed on the computer. It is located under the Scans option in the Anti-Virus and HIPS container on the Home page of the client. It "should" show the Scheduled Task. If it doesn't, work on that systems Task Scheduler. There's a problem with it. You can also see Task Scheduler Problems.
- Reinstall the Client Software -- Try reinstalling the client software to the client. Sometimes that shakes it up a bit.
- Reboot the System -- Of course, some problems can be always be resolved by rebooting the system. This may not work, but, hey, it's worth a try.