Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 7 subscribers
  • Views 17686 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Safeguard Console - Disable Block Policy Inheritance

StephenCooper

Hi,


I've tried to search for the answer (apologies if I've missed it!), but does anyone have an idea if you can disable access to 'Block Policy Inheritance'  on the Domain under Users and Computers (Safeguard Version 7.00.0.07)

We are looking at a locked down console for helpdesk users and don't want them to have the ability to block the Sophos Policy - there doesn't seem to be a way to create lower level security policy that doesn't have access to this setting.


Regards,

Steve



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember
    Hi Stephen,

    Good question. There isn't a specific setting for this, but you can do this in the following manner:

    - Login to the Management Console as an MSO
    - Security Officers > Right click Security Officers > New > New Security officer
    - In the Roles section just give the user 'Helpdesk Officer' privileges.

    When this user logs in they won't have access to the domain structure where they can fiddle with the policies.
    For the parts that are left in Users and Computers the access to 'Block Policy Inheritance' will be disabled.

    I hope this helps Stephen, but please let me know if you need any further help.
Reply
  • FormerMember
    0 FormerMember
    Hi Stephen,

    Good question. There isn't a specific setting for this, but you can do this in the following manner:

    - Login to the Management Console as an MSO
    - Security Officers > Right click Security Officers > New > New Security officer
    - In the Roles section just give the user 'Helpdesk Officer' privileges.

    When this user logs in they won't have access to the domain structure where they can fiddle with the policies.
    For the parts that are left in Users and Computers the access to 'Block Policy Inheritance' will be disabled.

    I hope this helps Stephen, but please let me know if you need any further help.
Children
No Data
Unfiltered HTML