Apply policies to all mailboxes

Hi lakesdan,

Thanks for reaching out to the Sophos Community Forum. 

It sounds like your Sophos Partner may have turned on Global Templates. You can find out more about this in the following article.
- Global Templates

I suggest reaching out to them to request that your site be removed from the template they have created, this way, your Base Policy will return to normal so you can configure it as needed. 

Thanks Kushal, our partner was able to reverse the changes so the base policy was unlocked, but all the settings have reverted to default so there has been some trial and error getting it back to how it was before.

To stop this happening again, I still want to set up my own policy and apply it to all users, so my question regarding applying a policy to all mailboxes without using static groups is still unanswered. If I apply the policy to no users or groups, but apply it instead to the whole domain(s), will that effectively apply to all mailboxes?

Thanks Kushal, our partner was able to reverse the changes so the base policy was unlocked, but all the settings have reverted to default so there has been some trial and error getting it back to how it was before.

To stop this happening again, I still want to set up my own policy and apply it to all users, so my question regarding applying a policy to all mailboxes without using static groups is still unanswered. If I apply the policy to no users or groups, but apply it instead to the whole domain(s), will that effectively apply to all mailboxes?

I suggest manually creating a policy with the desired settings. You can clone the Base Policy if it has now been configured appropriately. 

If you have AD Sync running, you can configure this to synchronize a group in your domain that contains all of the users. This will replicate any group changes to Sophos Central. By applying that same group in Sophos Central to the desired policy you can ensure that the Base Policy is ignored, and your users will instead receive your desired policy. 

I don't believe this is possible to do with a static group unfortunately. If this is something you need, I'd suggest ensuring that your Sophos Partner does not apply any policy templates to the ones you need to maintain.