Download the 'Sophos Deployment Packager Tool' (http://www.sophos.com/en-us/support/knowledgebase/67504.aspx) 1. Browse to `\\server\SophosUpdate\CIDs\S000\` and copy the SAVSCFXP folder to the folder you created on desktop. Type `"%userprofile%\Desktop\savinst\SAVSCFXP"` if using a command prompt. 2. Create a copy of the SAVSCFXP folder and rename the copy to SAVSCFXPXML. You should now have two folders inside the 'savinst' folder on the desktop - one called SAVSCFXP and the other SAVSCFXPXML, both with the same contents. 3. Using ExportConfig.exe export from the Console the policies you wish to apply to the endpoint. An example for Enterprise Console 4.x is shown below. `"%programfiles%\Sophos\Enterprise Console\exportconfig.exe" -type AU -policy PolicyName] -output "%userprofile%\Desktop\savinst\SAVSCFXPXML\sau\sauconf.xml"` 4. Ensure all output files, for each policy exported, are saved to the associated SAVXPSCFXML subfolder. Example: For the updating policy place the sauconf.xml file in:`%userprofile%\Desktop\savinst\SAVSCFXPXML\sau\sauconf.xml` 5. Integrate the XML files created in step 4 into the package with the [ConfigCID.exe tool. An example for Enterprise Console 4.x is shown below. `"%programfiles%\Sophos\Enterprise Console\SUM\configcid.exe" "%userprofile%\Desktop\savinst\SAVSCFXPXML"` 6. To save space, you can now delete the following files and folders, if they exist: * From the savinst\SAVSCFXP folder on the desktop: all of the NAC, RMS, SAVXP and SCF subfolders * From the savinst\SAVSCFXPXML folder: crt instmsiw.exe setup*.* 7. You can also delete any component that will not be installed (e.g. nac, scf) from the SAVSCFXPXML folder. #### Create a self-extracting archive that executes setup.exe with the appropriate parameters See also Command line parameters used by Setup.exe if you would like to customize the setup parameters. For the purpose of this article WinRAR will be used, but any other tool that accomplishes the same job is acceptable. 1. Inside the savinst folder, select both SAVSCFXP and SAVSCFXPXML, then right-click and choose “Add to archive…” 2. Under Archiving options, select “Create SFX archive” and select “Create solid archive” 3. In the Advanced tab, click the “SFX options…” button 4. Specify in the “Path to extract” text field:%SystemRoot%\Temp\savinst 5. Do one of the following: * Managed (client will report to the console):- specify in the “Run after extraction” text field:SAVSCFXP\setup.exe -mng yes -ni -s -crt R -updp %SystemRoot%\Temp\savinst\SAVSCFXPXML If the client has to report across a WAN network please see: Using Sophos message relays in a public WAN. * Unmanaged (the client will not report to the console):- specify in the "Run after extraction" text field:SAVSCFXP\setup.exe -mng no -ni -s -crt R -updp %SystemRoot%\Temp\savinst\SAVSCFXPXML 6. In the Modes tab, select “Hide all” 7. In the Update tab select “Overwrite all files” 8. Click OK to accept the options 9. Click OK to generate the self-extracting installer Run the self-extracting installer on all machines where SESC is to be deployed.