Hi,
I am fairly new to Sophos SafeGuard and wondered if someone can point me in the right direction of encrypting a USB Memory Stick using the Sophos SafeGuard Console?
Thanks and kind regards,
Dan Petford
Well done - good start!
Once you've made the group (I was just going to advise you created a group rather than individually assigning!) you need to apply it either to the OU/container you're working with or the root of the OU. I use the root here for one of my policies so that'll it can apply to any object within the tree.
Go to the root (or the OU you want to apply the policy/policy group to) - use the Policies tab.
Drag in the policy OR the policy group.
Automatically it'll be applied to all users and computers in the bottom half. This will NOT be desired for your policy.
Click on Authenticated Users and remove it.
Click on Authenticated Computers - remove this.
On the bottom right - drag in yourself as a user/group.
Click Save.
Find your PC - Use your RSOP Tab and put in YOUR username/group. Click search to confirm the policy IS being applied to you AND/OR your PC.
Refresh your client on your PC to get the new policy. You should see "New policies received" on the client.
Hope this helps?
Well done - good start!
Once you've made the group (I was just going to advise you created a group rather than individually assigning!) you need to apply it either to the OU/container you're working with or the root of the OU. I use the root here for one of my policies so that'll it can apply to any object within the tree.
Go to the root (or the OU you want to apply the policy/policy group to) - use the Policies tab.
Drag in the policy OR the policy group.
Automatically it'll be applied to all users and computers in the bottom half. This will NOT be desired for your policy.
Click on Authenticated Users and remove it.
Click on Authenticated Computers - remove this.
On the bottom right - drag in yourself as a user/group.
Click Save.
Find your PC - Use your RSOP Tab and put in YOUR username/group. Click search to confirm the policy IS being applied to you AND/OR your PC.
Refresh your client on your PC to get the new policy. You should see "New policies received" on the client.
Hope this helps?
Nothing really! One policy is just one, but a group could be a group of policies like "encrypt USB" policy combined with "Encrypt secondary drives" sort of thing.
I would always create a group - even if there's just one thing in there for now, as it makes it much easier to add/modify later.
I would (in your case) perhaps add a secondary policy to include different legal text notification that appears on their welcome screen to indicate that USB encryption IS activated. That way they'll be reminded of this every time they log in. Useful for "well you didn't tell me" type argument that is almost guaranteed from some users! You can set this under "Specific Machine Settings policy" and add this to your group? You can set the text you want to display under "Texts" in Policies.
