Thread Info
Options
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Lockdown for Standard users via SophosUser group

JasonO

I was curious if anyone else has beening controling the "SophosUser" local group with GPO or by script at deployment?

I work for a school district and our children have found the Quarantine back door that gives them access to the C: if it is blocked by Group Policy.

Thanks,

Jason

:2283


This thread was automatically locked due to age.
  • 0

    How about using restricted groups to define who is a member of the Sophos groups, this could be one thing to try:

    http://technet.microsoft.com/en-us/library/cc756802%28WS.10%29.aspx

    Ensure that "NT Authority\System" is left as a member of the SophosAdministrator group and maybe a global admin group so you can use Sophos.

    You could also try something basic like GPO software restriction policies to prevent savmain.exe running, this could provide another hurdle for some users.

    Thanks

    JAK

    :2288
    Unfiltered HTML