Client certificate does not update after AD password reset at the server.
When admins reset an AD password, the client certificate does not update. Therefore the users have to still use the old password. Is there a way to automatically update the client certificate when this situation occurs?
Remove Computer from Safeguard Console
Hi
I have a safeguard protected computer that has suffered a disk failure. I have installed a new hard disk and reinstalled Windows however when I look in the Safeguard Management Console I can still see the PC listed.
How can I safely remove the…
Windows account disabled
I'm trying to give an account POA on a laptop here, but the account is listed as disabled. The account works fine on computers without SafeGuard installed, but every computer with SafeGuard that I attempt to log in immediately locks up and logs me out…
Safegaurd 8 Synchronized Encryption revoke access
Hello,
We just started using Safeguard 8 and I have a quick question...When using Synchronized Encryption how do we revoke a single users access to unencrypt and/or open files? Since the synchronized encryption appears to only use the root_synchronized_encryption…
Safeguard easy 7.00.2.23 + windows 10
Hi, I seem to be getting mixed results on encrypting windows 10 machines with safeguard easy and im struggling because there is no documentation or guides from Sophos. The issues I am receiving vary but I have tried to outline them below. I have logged…
Combined Packages
Hi,
We have Sophos Enterprise Console protecting all our company computers and laptops and we are currently looking at encryption methods. Do the Sophos products have any kind of cross-functionality? Like being able to be configured from the same management…
Using Sophos Endpoint Security and Control 10.6 on all machines - Do I need to consider that when designing a deployment of Safeguard?
We are currently using Sophos Endpoint Security and Control 10.6 on 6000 machines on one domain.
Do I need to consider that when designing a deployment of Safeguard Encryption, or can I ignore the Sophos AV clients?
I guess I'm thinking if they could…
Has anyone pushed out the encryption MSIs using Microsoft GPOs?
I am trying to push out the SafeGuard MSI files using GPOs. I have configured the policies I want and tried linking them to specific OUs or our entire domain and MSIs will not install. I do not see any significant errors in the logs either. I modified…
RE: Plugging in BBC Microbit appears to allow access to removable drive which should have access blocked by policy.
ICTUCNES said:
Shows as a pen drive, have set a policy which should reject unencrypted volumes.
So your removable media encryption policy is volume based? How is the hard drive encrypted? SGNDE or Bitlocker?
RE: enable bit locker with GPO
Not without encryption of boot volume, and only on TPM-less machines, and only on Windows 8 and later.
Using an unencrypted boot volume by the way is asking for everyone with physical access to the machine to become local admin, and/or add key loggers…
RE: SafeGuard Version 8 UPGRADE Guide Needed
It is essentially the same as from 6 to 7. With one big difference: use MigrateSGN700_SGN800.sql.
Integrity protection in SafeGuard LC
Hey SafeGuard community,
as far as I can see SafeGuard LC uses AES-CTR. How is the integrity of a SafeGuard LC encrypted file guaranteed? Is there any documentation around the integrity protection in SafeGuard?
Thanks,
Mike
RE: Will users have option to Encrypt the partitions using Safeguard client
Thanks for the reply Toby.
Not sure if you got my question correctly. I am looking an option where logged on User can start the Encryption Manually by right click on the partition and start Encrypt.
Something like Ex: C partion, right click and start…
Will users have option to Encrypt the partitions using Safeguard client
We have a requirement, will users have option to encrypt the partitions manually like right click on the drives and Encrypt
or
Is there any option in Safeguard client where users select the partitions and encrypt.
Regards
Sunil Prabhakar
Identifying Users Not Logging into Sophos
Good morning!
The SafeGuard POA creates a login prompt for users to sign into (please see attached picture). We are having issues with users not logging into the Sophos login prompt that is created as part of the POA - users are still signing into the…
Windows 10 upgrade
Good morning,
We are upgrading some of our computers to Windows 10 and having issues with Sophos starting the encryption once reinstalled after the upgrade.
Details:
OS: Windows 7 Pro x64 upgrading to Windows 10 Pro x64
Models: Mostly Dell Latitudes…
Multiple Media Passphrases
Is there a way to allow users to create and use multiple media passphrases? For example, one USB drive uses the word "Lion" and the another drive uses the word "Tiger", can this be done from the same endpoint?
Change user password in Active Directory and Sophos allways ask for the old password. (Windows 10 Bitlocker)
Hello,
we use Sophos Safeguard 7.
It works very good but when i change an password in the active directory (eg. when a user don’t know his password)
When I try to login into Windows a Sophos window appears and ask for the old password for the…
SafeGuard 7.0.2.33 deployment to uencrypted (maybe encrypted too...) OS X 10.11.4 machine/s.
SafeGuard 7.0.2.33 deployment to uencrypted (maybe encrypted too...) OS X 10.11.4 machine/s. All components install successfully, but the configuration import fails with exit status 33. The import works fine in the GUI, after the deployment, but would…
RE: Newb / LanCrypt : May a process be allowed to write data onto a distant shared folder that is lancrypt protected, but not be able to read it afterward ?
The native function of LAN Crypt is encrypting even before writing. But that can only be done on a client with LAN Crypt installed. If you would be able to install SGLC Client on your Application Server, and have the application doing the writing under…
RE: Newb / LanCrypt : May a process be allowed to write data onto a distant shared folder that is lancrypt protected, but not be able to read it afterward ?
If he application server can copy a file to the remote folder depends on Windows rights in that folder, regardless whether SGLC is installed on the server or not.
On the workstation running the SGLC Client you could run a script to check for new files…
RE: I'm having No Init on Dell Precision 7510 laptops Safeguard 7.0.2
Hi Hoger,
Thanks for the info. I saw the post when first researching this problem. I've tried multiple of times With the Shift + F6 and I'm not able to get the timing right do to the lag I'm guessing??
Again thanks
Edit: I was finally able to…
I'm having No Init on Dell Precision 7510 laptops Safeguard 7.0.2
Hi and thinks for taking a look.
I'm having No Init on Dell Precision 7510 laptops after a long wait at the Safeguard "white screen" version 7.0.2... RAID is off in the bios and set to legacy. Any ideas for a work around? I haven't tried the latest…
screen goes black after sophos logo
We had a issue with a dell computer after the encryption was installed that was able to be fixed by the shift F6 hotfix. New issue is the same machine gets to the sophos logo, screen turns white then goes black with lines at the top of the screen. Any…
Dragon Medical v12 SafeGuard Exclusion
Using Nuance Dragon Medical version 12 on an encrypted device causes latency issues while dictating. I've created an exclusion for the executable but is there any known issues using dictation software on an encrypted drive.