How to deploy Sophos Conficker Removal Tool.msi
Automate installation of Sophos confic-a Cleanup Tool and run scan as an Administrator.
Use GP + 2 scripts.
cleanup.cmd:
@echo off
\\domain.gl.local\NETLOGON\psexec.exe \\%computername% -accepteula -u domain\admin -p %1 \\domain.gl.local\NETLOGON\cleanup.bat
cleanup.bat:
@Echo off
cd “c:\Program Files\Sophos\Sophos confic-a Cleanup Tool”
start /min cli.exe
http://www.sophos.com/support/knowledgebase/article/110381.html