For the Sophos Outlook Add-in, these tokens securely link the endpoint installation to your organization's specific Sophos Central tenant:
To ensure successful deployment and troubleshooting, it is recommended to add logging:
Using Microsoft Installer ( msiexec.exe ) via Command Prompt, PowerShell, or Unified Endpoint Management (UEM) tools like Microsoft Intune and Group Policy (GPO) is the standard method for this rollout. However, a specific command syntax frequently surfaces in administrator forums and deployment scripts:
| Component | Command Snippet | Explanation & Effect | | :--- | :--- | :--- | | | msiexec | Invokes the Windows Installer service to install, modify, or configure software products on Windows systems. | | Install Option | /i | The standard flag to install or configure a product, followed by the path to the .msi file. | | User Interface Level | /qr | "Reduced UI" mode. It suppresses most dialogs and wizard pages, but displays a modal progress bar so the user knows the installation is running, without requiring interaction. | | MSI File Name | SophosOutlookAddinSetup.msi | The actual installer file. Note: Some variations may exist like SophosOutlookAddinSetupUTM.msi depending on your specific gateway appliance version. | | Enable Type (T) | T=1 | Defines the available feature set for the Add-in. Setting T=1 likely enables both spam reporting and encryption (as opposed to limiting to one function). | | Eco Label (EC) | EC=3 | Defines specific operational modes or data policies (e.g., encryption or routing) within the Sophos ecosystem. Setting 3 often correlates with "both features enabled" or "full functionality". | | Client ID (C) | C=1 | Assigns an identifier for internal tracking. 1 usually indicates a standard client configuration that instructs the Add-in to connect to the primary Sophos gateway. | | Ignore Error (I) | I=1 | Forces the installer to skip certain non-critical errors (like missing dependencies) and complete the installation anyway. This is crucial for silent or logged deployments. | | Workgroup (WG) | WG=1 | | | Alternative Short Form | T=1 EC=3 C=1 I=1 | Some documentation uses shortened single-letter variables, which achieve the same configuration effect as above. | msiexec qr i sophosoutlookaddinsetupmsi t1 ec3 c1 i1 work
: The target installer package. Ensure the command line is executed from the directory housing this file, or provide the absolute file path (e.g., "C:\Deploy\SophosOutlookAddInSetup.msi" ).
msiexec /qn /i "SophosOutlookAddInSetup.msi" T1=EC3 C1=I1 /norestart /L*V "C:\Windows\Temp\SophosOutlookAddin_Deploy.log" Use code with caution. Scripting with PowerShell
Configures SPX encryption features. C=1 (Component): Sets communication parameters. I=1 (Indicator): Configures the indicator component. For the Sophos Outlook Add-in, these tokens securely
If you executed the original command and saw an error like:
For this command to work, you must add the .msi extension and proper spacing. The corrected command should look like this:
Note: Adding /norestart guarantees that Windows Installer will not force an unexpected system reboot if a shared dependency file is locked. Implement Verbose Logging | | User Interface Level | /qr | "Reduced UI" mode
But your string msiexec qr i sophosoutlookaddinsetupmsi t1 ec3 c1 i1 work will because:
: The name of the installer package.