This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Automated reaction to "Differs from policy" possible?

Hi all,

as the administrator, you receive a message and you see in the SEC, that one or more computers differ from group policy, e.g. they have deactivated the On Access Scan.

Is there a way to automatically react to this situation, i.e. to make the server execute the "Comply with"-action by itself?

Thanks

Regards,

Michael

:29087


This thread was automatically locked due to age.
Parents
  • Hi,

    There is no way within the product to automate the server to push a policy down.  

    You can make the client re-request a policy as mentioned here:

    /search?q= 22831

    You may wish to contact Support - as Pro-Services probably have a tool to interface with the Sophos Management Service to poke it into action.  Sadly it's not something you can initiate from the database layer.

    To stop users changing settings locally you can enable Tamper Protection but if they are local admins they can stop the SAVService anyway.

    Regards,

    Jak

    :29089
Reply
  • Hi,

    There is no way within the product to automate the server to push a policy down.  

    You can make the client re-request a policy as mentioned here:

    /search?q= 22831

    You may wish to contact Support - as Pro-Services probably have a tool to interface with the Sophos Management Service to poke it into action.  Sadly it's not something you can initiate from the database layer.

    To stop users changing settings locally you can enable Tamper Protection but if they are local admins they can stop the SAVService anyway.

    Regards,

    Jak

    :29089
Children
No Data