Our Sophos enterprise console is failing to update our clients when we enable an AD policy to restrict .exe and other restricted file types from running. I am able to add exceptions to the policy but do not know where sophos places the updates when…