Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Locking Down Sophos User Groups

Hello Sophos.  Thanks for the support in advance!

I'm looking for advice for how to lock down user abilities in Sophos.  I've had a couple instances recently where users have installed BitCoin mining software.  Sophos blocked it initially, but the users were able to authorize the EXE and allow it to run.  I want to remove their ability to do this.

I read this info - https://community.sophos.com/products/sophos-central/f/sophos-central/6578/sophos-user-groups-and-ad.  Users in my environment are members of the Local Administrators group, so they have been added to the local SophosAdministrators group.

The desired solution should:

  • Remove users' ability to authorize apps that would otherwise be blocked
  • Allow another group (most likely Domain Admins) to authorize apps

Any guidance or training material would be appreciated.  Thanks.



This thread was automatically locked due to age.