End User local Right

Question

It's possible to disable the end user right to add local realtime exclusion for file/folder/drive? Enterprise console 5.3.1, client Enpoint 10.6.3 thank's Marco

jak · Accepted Answer

Hi, 
 I assume they are local admins in order to have been added to the local SophosAdministrator group on install. That said, would AD restricted groups controlling the Sophos local groups on the endpoint be useful? 
 Regards, 
 Jak