Hi,
Im managing an estate of Windows XP and 7 users with Sophos Enterprise Console 5.2.1 r2. Endpoint security and control 10.0.
While reviewing EC I can see a number of users have removed from quarantine a file identified as a virus/spyware: Mal/ExpJS-BE.
I would like to know how best to ensure that end users do not have the permissions to remove anything from quarantine but raise this into our service desk for investigation first.
Having the ability for end users to re-introduce files which Sophos has quarantined is not something we consider helpful.
We want this to be restricted to Sophos Administrators only, by that I mean IT staff with the appropriate knowledge and a ticket to track such changes.
Can anyone advise how this is possible through EC, GPO etc, I really dont want to be visiting desktops to make changes to hundreds of machines.
Many thanks
D
This thread was automatically locked due to age.
