How to add Computers to Policy by default?

Hi Sophos User1672 

AD sync tool will be helpful here as suggested by our Support engineer. Also, there are other two options:

1. Set the Base policy as you desire if possible, this is applied to all devices

2. Use the group switch in the installer (https://community.sophos.com/kb/en-us/127045) to automatically join a new device to a group; assign your desired policy to that group.

Hi Shweta,

Can you confirm if we can do this via the Sync Client or not as this is what your colleague in support mentioned?

The reason I ask is that we'd like to have a number of different groups in AD that contain Computer Objects. We then want each of these groups to assign different policies meaning if we need to move a device to a less restrictive policy we only need to change it in Active Directory and not require logging into the Sophos Central Portal.

I'd like to know for sure either way so if you could confirm this is NOT possible then while not great based on the support ticket at least we know for sure.

Hi Sophos User1672 

Would you please PM me the case number that you have already registered? 

I will do but you also mentioned above that there are "Also, there are other two options:" implying it's possible to do so with the Sync tool so if this is possible I'd like to know and anyone else browsing these forums would be able to see the response as well.

Hi Shweta,

I sent you a PM as requested  yesterday but have not yet had a response nor have I had any further contact from your support team on the ticket I have open.

Can you clarify what it going on please?

Hi Sophos User1672 

Active Directory synchronization maps users and groups from Active Directory to Sophos Central. You can then assign the policy to the particular group. Do you want to sync the computers OU to Sophos Central account? 

Hi Sophos User1672 

Active Directory synchronization maps users and groups from Active Directory to Sophos Central. You can then assign the policy to the particular group. Do you want to sync the computers OU to Sophos Central account? 

Hi Shweta,

I want to apply Policies to devices based on what AD Group the computers are a part of. I am unable to see how I can assign Active Directory groups to Policies within the Sophos Central Portal. Is this something that is supported as this is what was said by your colleague in the support ticket. If this is not supported then please let me know and I can move up with the command line method.