Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Subscribers 9 subscribers
  • Views 2594 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Create new policy, and have it apply to new users/computers by default

Robert Patton

 I don't see a way to create new policies (like for Web Control), and just have them apply to everyone. So for every new user or PC, we'll have to add them manually to the policy?

Are you guys serious?



This thread was automatically locked due to age.
  • 0

    Hello,

    There are two options;

    1. Set the Base policy as you desire, this is applied to all devices

    2. Use the group switch in the installer (https://community.sophos.com/kb/en-us/127045) to automatically join a new device to a group; assign your desired policy to that group.

    Stephen

  • +1 in reply to StephenMcKay

    Thanks Stephen, I'll try out the group switch in the installer

  • 0 in reply to StephenMcKay

    We were already installing from a batch file with the --quiet switch, so the group switch was pretty easy to add. We have multiple sites, and name the PCs accordingly, so getting each PC into a group by site is easy using the batch file to detect the first three letters of the PC name.

    So first create the groups you need in Central, including an Unassigned group in case the name doesn't match one of your site codes.

    Then modify your batch file:

    @ECHO OFF
    FOR /F "tokens=* USEBACKQ" %%F IN (`hostname`) DO (SET var=%%F)
    SET SITE=%var:~0,3%
    IF /i "%SITE%"=="PDX" (
    SET GROUP=Portland
    ) ELSE IF /i "%SITE%"=="SFO" (
    SET GROUP=San Francisco
    ) ELSE (
    SET GROUP=Unassigned
    )
    "\\FILESHARE\Sophos\Sophos_Central\SophosSetup.exe" --quiet --devicegroup="%GROUP%"

Unfiltered HTML