New Computer Policy - Apply to all Computers ?

Hi Aaron, 

Welcome to Sophos, as for your query the policy applied to the systems is user's based. So, in other words, the policy cannot be changed as per the machine based policy. For Machine based policy we have Server Protection that can manage machine based policy disregard the users logged onto that system. 

In SOPHOS cloud console IS possible to create COMPUTER policies, but - it seems to me - simply aren´t working. I set this as Support case to Sophos.

Hello Jiri Hadamek,

I'm not a Central user so I can't say from experience how it behaves and whether the documentation is (still) correct. But ...

COMPUTER policies [...] simply aren´t working
For each "feature" (Threat Protection, Peripheral Control, and so on) there is one and only one policy that wins. From the Central Admin Help under About Policies: If you set up a user policy and a computer policy for the same feature, and both could apply to the same computer, the policy that’s higher in your policy list takes priority (see here for a simple example).  How did you determine that computer policies aren't working?

Christian

Hello Jiri Hadamek,

I'm not a Central user so I can't say from experience how it behaves and whether the documentation is (still) correct. But ...

COMPUTER policies [...] simply aren´t working
For each "feature" (Threat Protection, Peripheral Control, and so on) there is one and only one policy that wins. From the Central Admin Help under About Policies: If you set up a user policy and a computer policy for the same feature, and both could apply to the same computer, the policy that’s higher in your policy list takes priority (see here for a simple example).  How did you determine that computer policies aren't working?

Christian

Hi Christian,

thank you for your help, but ALL that you have written is unusable for Sophos central cloud console.

1. I am sure that COMPUTER policy isn´t working, because I can clearly determine resulting policy from file c:\ProgramData\Sophos\Sophos Anti-Virus\Config\machine.xml.

In this file I CANNOT SEE any changes (after waiting and updating Sophos config SEVERAL times on several testing PC)

2.  I can attach COMPUTER policy to Computer or GROUP of computers in Cloud Console, but in resulting policy set in this Console aren´t any COMPUTER policy displayed.

Hello Jiri Hadamek.

as said I don't use Central but its concepts aren't inapprehensible (and not that dissimilar from SEC's). There's one aspect unknown to me though - whether a computer (not a server) has always a user assigned, i.e. whether the device requests just the computer policies after a user has logged off or keeps the last logged on user associated with it.

Which policy did you test and what changes did you expect? Does the resulting set contain a user policy or the Base policy instead of the expected computer policy?

Christian