Ranger Desktop and Start Menu are not displayed when logging on

Question

Why do I get a 'My Documents' folder displayed instead of the Ranger Desktop and Start Menu?

Symptoms

'My Documents' folder displayed instead of the expected desktop.

When logging on as a Ranger authenticated user, after the Ranger splash screen is displayed, the Ranger desktop, start menu and task bar are not displayed and the screen is filled with an explorer window showing the 'My Documents' folder.

Cause

Secmon.exe is detected as susicious behaviour by Sophos A/V and blocked

Resolution

The Secmon.exe application must be added to the list of Authorized applications in the Anti-virus policy.

Instructions

In  Anti-virus and HIPS policy, select On-access Windows exclusions, and add the following folders and files to the 'Excluded items' list:

C:\Program Files\Ranger\

C:\Program Files\Ranger Reporter\

C:\Program Files\Ranger Remote Control\

C:\Program Files\Sentinel Replication Tools\

C:\Windows\System32\LogFiles\Sentinel Replication\ 

Within the Sophos Enterprise Console open the Anti-virus & HIPS policy. Select the 'Authorisation' button and add following files to Suspicious files, Suspicious behaviour and Buffer overflow:

Add the following files from the following locations:

c:\program files\ranger\Secmon.exe

c:\program files\ranger remote control\client32.exe

c:\program files\ranger remote control\runplugin.exe

c:\windows\system32\rgruinit.exe

c:\windows\sysvol\sysvol\<domain_name>\scripts\ranger.bat

Click OK twice to get back to the console screen.

For further information please see the Sophos Support Article

http://www.sophos.com/support/knowledgebase/article/16088.html

If problems persist Sophos recommend switching off HIPS functionality in the Anti-virus and HIPS policy, by clicking HIPS runtime behavior, and deselecting 'Detect suspicious behavior'.

Testing

Logon to an affected client as a Ranger user.