Safeguard Unconfirmed Users

It would certainly be something I'd look at.

As you're aware "Unconfirmed users" should be users outside of the directory that then have to manually acknowledged. SSG isn't marrying up these users with the directory as it's seeing the users as not a direct match. Local users only known to that machine would be expected into Unconfirmed users - They're acknowledged as legitimate accounts but they're not known to Sophos (as a confirmed user or a Service Account) or the directory. 

It does sound like there's something wrong/odd about the creds that are handed over as the PC logs in. Can I just clarify a few things?

You're using AD?

You're logging onto the same PC each time?

If you log on as another user (that's also known to AD) do you get the same issue?

Thanks for your response. Yes we're using AD, yes it's the same PC but I haven't checked another user yet. Management centre shows my test user as the owner of that PC so thought I needed to stick with it. It has actually encrypted the local disk but it's not right. Viewing the status says it's not received any keys yet.

I'll try another user when back in the office and see what happens.

Hi Steve - Just reading through some other docs this morning in ref to SSG and spotted this...

https://community.sophos.com/kb/en-us/126509, in particular - 

May be worth checking you're running the latest version of the backend?

Thanks for the note, I've double checked and already have it applied. I've got a call open with Sophos support so we'll see how that goes.

Thanks for the note, I've double checked and already have it applied. I've got a call open with Sophos support so we'll see how that goes.

Hi Steve,

even though the reason mentioned for not being automatically approved is not exactly the same, it might be worth a try having a look at:  

https://community.sophos.com/kb/en-us/124328

It also describes a new alterantive way of auto-approving users in SGN 8.10.

Cheers

F.