Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 2334 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

prevent reporting operating system to Sophos Console

99999999

Hello,

How can I prevent endpoint computers to report their operating system to Sophos Console. I have access only to that computers and to relay server. I don't want to give knowledge to people who are administering the console of this information.

Thank you and best regards,

Jake

:45237


This thread was automatically locked due to age.
  • 0

    Hello Jake,

    do I understand correctly you are not administering the console? And what means access [...] to relay server?

    It strikes me as odd wanting to hide this information from central management - what is the particular reason? In which way could this information be "abused" by the administrators? SEC needs the OS information at least for Protect Computers (admittedly it is not necessary to use this feature), it might "leak" with an event/alert and will revealed anyway if there is need for troubleshooting.

    Christian

    :45281
  • 0

    Hi Christian,

    Yes I work in a big corp. I need to use a few XP computers due to some specific software which need this OS. We as a company are obliged to switch to Windows 7 or newer. I just don't want to argue why I need locally some XP machines. I'm the local administrator and I really don't want to share what machines are on my site. But of course I need Sophos to feel safe.

    Can you help me?

    Jake

    :45297
  • 0

    Hello Jake,

    I don't give advice how to bypass company policies :smileywink: but it sounds like Sophos (or another AV) is not mandated and I wonder if anyone would care when not seeing these machines in SEC at all.

    Christian

    :45303
  • 0

    The OS info comes up from the client in a status message.  These occur, after an update, after the Sophos Agent service starts, etc..  I don't see a way of permanently changing this in SEC and there is no client override option.  You could update the OS id in the computersanddeletedcomputers table of the database (change it to the same ID as a Winodws 7 for example) but you'd have to keep doing it.

    Regards,

    Jak

    :45327
  • 0

    Ok, I'll try, but where can I find this database?

    Best,

    Jake

    :45331
  • 0

    Hi,

    By default Sophos installs a SOPHOS named Microsoft SQL Server instance for the management server to use.  It could be remote.

    Start with this article if you're unsure:

    http://www.sophos.com/en-us/support/knowledgebase/113030.aspx

    I would then install SQL Server management Studio on a computer to connect to it.

    Regards,

    Jak

    :45341