Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 10 subscribers
  • Views 766 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Prevent employees to use endpoint agent installer for private use

Thoms0n

Hi!

we use sophos central in our environment. All Clients, which are connceted to companys network have central endpoint agent installed. (Installted trough downloaded Installer vom central with parameters group-membership in central, update-cache server)

is there a possibilty to prevent employess to take this installer (even the installer without parameters) for installaing central endpoint agent on non company computers / private computers?

i see some computer objects in central which are definitly not company ones. (IP Adress, Username, Computername).

by running setup agent without group parameter the computer objects will be placed in default group with base-policies.

best regards

T.O



This thread was automatically locked due to age.
Parents
  • 0

    There isn't a way to stop users from running the installer on their private computers once they have access to it, however what you can do is limit who has access to the installer.  What is your current means of deployment?  If using AD start-up scripts or a software deployment tool, theoretically a user should never get access to the installer.


    Once you have your deployment method setup where users no longer have access to your installers, you can expire all previously downloaded installers in your environment so the current installer your users have will no longer work.

Reply
  • 0

    There isn't a way to stop users from running the installer on their private computers once they have access to it, however what you can do is limit who has access to the installer.  What is your current means of deployment?  If using AD start-up scripts or a software deployment tool, theoretically a user should never get access to the installer.


    Once you have your deployment method setup where users no longer have access to your installers, you can expire all previously downloaded installers in your environment so the current installer your users have will no longer work.

Children
No Data
Unfiltered HTML