• Sophos sees an MBR on a GPT device

    I've been coming across several systems that are using Sophos with Bitlocker where I cannot remove the client. When I try, I get an error that the MBR is encrypted and needs to be decrypted first. What's strange is that these are GPT systems (hence Bitlocker…
  • Reimaging a Hard Drive

    Hey everyone! I'm fairly new to Sophos and had a question that I think I know the answer to, but I want to make sure. I have a brand new employee running Windows 7 Professional SP1. We are using SafeGuard 8.0 with BitLocker. Her laptop is a Lenovo Thinkpad…
  • Windows 10 Education - Bitlocker C/R - Dell XPS 13 9350 - no boot device found - UEFI entry "sophos boot" - boot error

    Hello, I have a dell XPS 13 9350. A client came to us with a prompt for Bitlocker recovery key (not challenge/response). Once recovery was complete, the device attempts to boot and responds with "no boot device found". The recovery type for this computer…
  • Windows 10 Screen Lock/Unlock takes 5 minutes

    We have multiple domain joined Windows 10 Enterprise/Education computers that are exhibiting extremely long delays in locking and/or locking the screen (i.e. Windows Key + L, Start > User Display Name > lock, Ctrl + Alt + Del > Lock). These delays range…
  • HP 745 G3 Encryption issue (Carrizio Architecture)

    Hi, New to all this, so sorry if the wrong place. I know there's an incompatibility with the Carrizio arch, and that the solution is to have my Enterprise Server manage Bitlocker, but I don't actually know how to do that. Is there a chance that…
  • Second PIN for Bitlocker

    I have configure a Windows 10 laptop with Bitlocker using Safeguard encryption. Everything is working fine. I am prompted at preboot for the Bitlocker PIN. Is it possible to have more than one PIN. In my case i would like the administrator to have a PIN…
  • SafeGuard Enterprise 8 - Removable Media Encryption Not Working

    Hello, I've configured our Removable Media Encryption policy and it doesn't appear to be working. When a USB drive is plugged in, there are no prompts to encrypt and it is fully readable. I couldn't find what other settings need to be configured to…
  • Using Bitlocker, I would like to Change from using a Password to using TPM

    After I installed Sophos on my Windows 10 laptop to use Bitlocker with a password, I noticed that my laptop has a TPM module installed that was disabled by default. I want to now use TPM instead of typing in a password upon startup of my system. Do…
  • Bitlocker not encrypting, bad password?

    Hi all I'm having a problem encrypting one of our laptops. I have installed all three packages; Prerequisite, Client setup and Client config. I have successfully contacted the SafeGuard server, synced and registered the user. When the laptop gets…
  • Windows 10 Updates with Sophos

    Good morning, With Safeguard installed on Windows 10 and the drive being encrypted, is there a way to apply Windows 10 Build updates (1511, 1607, etc.)? So for example, (assuming safeguard 8.1 was released), would there be a way to upgrade Sophos to…
  • SafeGuard Management Center 7.00.0.97 not generating user Certificate after first sign-in

    I'm noticing a most recent issue with our SafeGuard environment where newly added members to our AD are assigned an natively encrypted end-point managed by our Management Console. Once they've signed into the machine for the first time, they are not receiving…
  • SGN Enterpirse 8.0: lockdown user that hasn't connected in a while to Server

    Hello Everybody, is it possible to add an expiration date to keys, or to the user sign on, in order to lock somebody that hasn't connected to the Safeguard Server in an established period of time? this will be for windows 8, 8.1 and 10. So the POA…
  • Win 10 1607 (Education) - anyone using V7 SG successfully?

    Currently experiencing a few issues with 1607 (fresh build not IPU) and V7. Although an upgrade to V8 is now in the planning I'd like to get this working properly (if possible) 1607 client wouldn't encrypt boot volume. Policy kicked in for secondary…
  • Safeguard easy 7.00.2.23 + windows 10

    Hi, I seem to be getting mixed results on encrypting windows 10 machines with safeguard easy and im struggling because there is no documentation or guides from Sophos. The issues I am receiving vary but I have tried to outline them below. I have logged…
  • SafeGuard Encryption and Cloud.

    Hi, I just started using SafeGuard Encryption and I have a few question. I have policies setup for Full disk encryption, file encryption for users desktop, dropbox and network share. My question is when I upload an encrypted file to a website like mHelpDesk…
  • Safeguard Easy Windows 8 POA

    Hi there, Is there no Sophos POA for Windows 8? Does it just use Bitlocker and a PIN/Startup key? One issue I have is if a user enters their PIN wrong multiple times they have no idea how long they can wait to re enter the correct pin. (The TPM…
  • Windows 10 Pro, SafeGuard 8.00.0.251, and TPM

    If TPM in enabled after SGN is installed and encrypted the disk, how is the "double logon" issue mitigated? Machine still prompts for "BitLocker" password at boot and Windows logon password to gain access to the OS? Thanks in advance, Jim C…
  • Windows 10 Pro x64 issues

    Hi All, We've started rolling out Windows 10 and we've installed Sophos Safeguard 7.02 with the hotfix and it installs ok, the laptop appears to connect ok with the management server as you can see the new laptop in the list once Synchronised, however…
  • safeguard 7 bitlocker how do i enable encryption on non bootable device

    Hello everybody, i have a problem with the Bitlocker encryption for non bootable Device. I have one policie for the Boot volume that works fine and now i want to encrypt the D Partion and E Volume on the same System but Safeguard do not start the…
  • RE: enable bit locker with GPO

    You can set TPM or TPM + PIN as Bitlocker Logon Mode for Boot Volumes, and Password as Bitlocker Fallback Logon Mode for Boot Volumes, so Windows 10 machines without a proper TPM will use a password.
  • RE: enable bit locker with GPO

    Not without encryption of boot volume, and only on TPM-less machines, and only on Windows 8 and later. Using an unencrypted boot volume by the way is asking for everyone with physical access to the machine to become local admin, and/or add key loggers…
  • Windows 10 upgrade

    Good morning, We are upgrading some of our computers to Windows 10 and having issues with Sophos starting the encryption once reinstalled after the upgrade. Details: OS: Windows 7 Pro x64 upgrading to Windows 10 Pro x64 Models: Mostly Dell Latitudes…
  • RE: bitlocker win 8.1

    There should be an error code which is reported to the backend (you should see an event in the MC) which can be checked to verify what the reason for the not starting encryption is. Without knowing what the error code is, some common reasons for BitLocker…
  • I accidentally unlocked a BitLocker and decrypted the harddisk without un-installing Safeguard client.

    I accidentally unlocked a BitLocker and decrypted the harddisk without un-installing Safeguard client. Now this PC with Safeguard installed but in decrypted mode, Can I un-install Safeguard or I need to encrypt the drive and do un-ins
  • Change user password in Active Directory and Sophos allways ask for the old password. (Windows 10 Bitlocker)

    Hello, we use Sophos Safeguard 7. It works very good but when i change an password in the active directory (eg. when a user don’t know his password) When I try to login into Windows a Sophos window appears and ask for the old password for the…