This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Enterprise Console 4.0

Hi Guys,

I have a server that has the management console installed on.  It is not the main server.

I am trying to set this up so my helpdesk can carry out delegated functions without having to RDP onto the main server.

I have found that in order to launch this remote console they need not only to be a member of the Sophos Console Administrators group, (I got that from the original error message) but also local administrators on the actual main server (kind of defeats the object..)

Anyone have any idea what i need to change on the main server to allow them to run the console without being a local admin?

Many Thanks,

Max

:5030


This thread was automatically locked due to age.
Parents
  • Thanks for the reply Christian,

    Sadly unless i'm missing something (which is quite likely)  that tag only brings up 4 thread, none of which quite mirror my issue.

    Its clear to me to run the console you need some kind of permission on the main sophos server that is not within the SEC as these permissions are fine, and not the console admins local group, as this is also fine.

    I'm guessing its a right to to a file or service on the server that power users doesn't give my local admin does.  I just need to know what it is.

    The remote console installtion is fine as if i run it as a domain admin it works, and if a grant a test account elevated rights is also works.  The second i remove them.. Computer says no!!....

    Thanks,

    Max

    :5040
Reply
  • Thanks for the reply Christian,

    Sadly unless i'm missing something (which is quite likely)  that tag only brings up 4 thread, none of which quite mirror my issue.

    Its clear to me to run the console you need some kind of permission on the main sophos server that is not within the SEC as these permissions are fine, and not the console admins local group, as this is also fine.

    I'm guessing its a right to to a file or service on the server that power users doesn't give my local admin does.  I just need to know what it is.

    The remote console installtion is fine as if i run it as a domain admin it works, and if a grant a test account elevated rights is also works.  The second i remove them.. Computer says no!!....

    Thanks,

    Max

    :5040
Children
No Data