Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 1 subscriber
  • Views 8267 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to apply policies to all sub-groups?

faygate

Been wondering for weeks why my client computers haven't been picking up my policies and it turns out that even if you set the policy at the top of the group any sub-groups underneath do not automatically get the same policies. Fine if you've got a small setup, not so great if you're syncing with a complicated Active Directory structure.

Does anyone know how to do this in Enterprise Console 4.0 or even with an SQL script? Can't find an option anywhere which I think is a bit lame.

:1719


This thread was automatically locked due to age.
Parents
  • 0

    I've already discussed policies and propagation/inheritance (with someone at Sophos) some time ago. If a "push down" option were available you might need also an "exclude this group" attribute. 

    IMHO the problem is only really a problem if you need to exchange policies.

    But what you're talking about is not exchanging the policy for a group but applying the same changes to a number of policies. I can see why you could have that many AV policies - exceptions/exclusions. Now these are bad anyway. Really. But I don't say you shouldn't use them - perhaps you really need them. In this case though you'd need a policy hierarchy and not propagation. Or am I wrong?

    And please elaborate on the limitations.

    Christian

    :1801
Reply
  • 0

    I've already discussed policies and propagation/inheritance (with someone at Sophos) some time ago. If a "push down" option were available you might need also an "exclude this group" attribute. 

    IMHO the problem is only really a problem if you need to exchange policies.

    But what you're talking about is not exchanging the policy for a group but applying the same changes to a number of policies. I can see why you could have that many AV policies - exceptions/exclusions. Now these are bad anyway. Really. But I don't say you shouldn't use them - perhaps you really need them. In this case though you'd need a policy hierarchy and not propagation. Or am I wrong?

    And please elaborate on the limitations.

    Christian

    :1801
Children
No Data