There is a function in the Dashboard that allows you to view Computers with Errors. The following is a brief discussion of some of the more likely scenarios you will see in the Status window for system with errors:
- Alerts and Errors -- These occur in the Status tab on the Console:
- Errors -- There can be a variety of errors that can be observed. <Right Click> on the system in the Console, an dselect View Computer Details to see the specific error shown below the basic system information.
- Warning -- More often than not, these appear to indicate the local system needs to be rebooted for the updates that have been applied to take effect. This is usually at first installation. But, the warning indication will disappear once the system has been rebooted.
- Scanning Errors -- These are indications from the local system as to the nature of the problem it had
- The On-Access Driver Failed to Perform a User action on <Filename> -- This can happen on a system, but I'm not convinced it's a accurate report. Emails that Administrators get from the system indicate that even though it doesn't show an item remediated, the local system may still be removing the item. Double check this with someone who is on the sav@apollo.adcom.uci.edu email list to see whether or not the item has been resolved. <Right Click> on the system, and Resolve Alerts and Errors by acknowledging the item. If it is a recurring situation during the next on-demand scan, you can always deal with it at that time.
- The Attempt to Move the Infected File <filename> failed. The user does not have the rights to perform the action on the infected file [0xa0200006] -- This, too, may be an inaccurate assessment. Check emails that the Sophos system sends to Adminstrators about how it dealt with this situation. Chances are the problem was resolved, but the reporting system sent an error to the Console before the issue was resolved. <Right Click> on the system, and Resolve Alerts and Errors by acknowledging the item. If it is a recurring situation during the next on-demand scan, you can always deal with it at that time.
- The Folder <Folder Name> Doesn't Exist -- This is "probably" a hold-over from items in the registry that have not been removed after the folder has been removed. This happens, usually, from a bad uninstallation of software from the local system. You can ignore this error and <Right Click> on the system, and Resolve Alerts and Errors by acknowledging the item. These are not a big issue.
- File <filename> could not be removed [0xa0250029] -- This is most likely an error message that got generated before thelocal client software removed the file. The best way to determine it is to contact one of the Sophos Administrators that get emails from the system. That will confirm whether or not the error is an issue.
- Update Errors