This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoint users can change settings

Hi All,

Recently setup Enterprise console and configured policies for each category.

However most of the users are able to open the Endpoint and change their firewall settings,  strangely I installed the Endpoint on another laptop and configure firewall is greyed out...however it's in the same policies as the other PCs/Laptops.

I also have tamper protection enabled on all policies.

Any idea how to make it so users cannot change any settings?

Thanks

Ross

:54253


This thread was automatically locked due to age.
Parents
  • Hi LTF,

    Yes and no... I know why just not why it has happened on some and not others.  If you go into local users and groups on the PCs, there is a sophosadministrator group,  in here I had /everyone as well as domain admins.  I removed it and now users cannot change any setting.

    Now I don't know where it gets this group from and how everyone was in there.  If I find out I'll report back.

    Cheers

    Ross

    :54331
Reply
  • Hi LTF,

    Yes and no... I know why just not why it has happened on some and not others.  If you go into local users and groups on the PCs, there is a sophosadministrator group,  in here I had /everyone as well as domain admins.  I removed it and now users cannot change any setting.

    Now I don't know where it gets this group from and how everyone was in there.  If I find out I'll report back.

    Cheers

    Ross

    :54331
Children
No Data