+ Post New Thread
Results 1 to 6 of 6
How do you do....it? Thread, Sophos V5.2 advice needed. in Technical; I was wondering if any one know how to do this or if it is possible. We are testing the ...
  1. #1
    Kyle's Avatar
    Join Date
    Jan 2006
    Posts
    972
    Thank Post
    91
    Thanked 14 Times in 13 Posts
    Rep Power
    21

    Sophos V5.2 advice needed.

    I was wondering if any one know how to do this or if it is possible. We are testing the new version of Sophos on a test network with around 5 laptops connected to it. We have set up the EM Librabry and EM COnsole and deployed the software. All is well so far, when a student user logs on I know they only get certain access to the Sophos Options by right clicking the shield near the clock or by using the 'start menu>programs route.

    Is there any way we can stop them having any access by right clicking the sheild near the clock. I can forsee all sorts of problems withthem messing about with certain settings

    Or do you leave them acces to this, advice needed please.

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,996
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: Sophos V5.2 advice needed.

    I have had trouble with applications applet things in the tray before. I know disable the tray for students. This can only be done in XP.

  3. #3
    Kyle's Avatar
    Join Date
    Jan 2006
    Posts
    972
    Thank Post
    91
    Thanked 14 Times in 13 Posts
    Rep Power
    21

    Re: Sophos V5.2 advice needed.

    Where is the setting to disable the tray in GP?

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,996
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: Sophos V5.2 advice needed.

    Have a scan through this spreadsheet you will find it easy in there.

  5. #5
    krisd32's Avatar
    Join Date
    Feb 2006
    Location
    Longridge, Preston
    Posts
    545
    Thank Post
    85
    Thanked 68 Times in 47 Posts
    Rep Power
    43

    Re: Sophos V5.2 advice needed.

    you can set groups in AD for access to the sophos program i think ou have sophos user, sophos administrator etc... if you take the appropriate groups out of membership to the sophos groups this should either allow or dissalow them access to certain parts of the sophos anti virus program, if set up correctly they shouldn't be able to edit the auto update settings

    cheers
    kris

  6. #6

    Join Date
    Oct 2005
    Location
    West London
    Posts
    55
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Sophos V5.2 advice needed.

    I think that the groups set up are local on each machine, with users automatically added when the client is installed.
    To control user access from AD, I run the AddSophosGroups.cmd script listed below on the DC to create domain groups.
    Then I run ModSophosGroups.vbs script, via group policy PC startup script on each workstation to remove the sophos default groups from the local groups. Then I can control access in AD by placing users in the domain groups.

    ModSophosGroups.vbs:
    'Modifies local Sophos Groups on a domain
    '=============================================
    on error resume next

    dim sh, key, strComputer, DomainString, LocalString, fso, textfile

    Set fso = WScript.CreateObject("Scripting.FileSystemObject")
    set textfile = fso.CreateTextFile ("C:\Program Files\Sophos\GroupMods.txt",2,true)
    set sh = Wscript.CreateObject("Wscript.Shell")

    'get domain name
    key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Currentversion\Winlogon\CachePrimaryDomain"
    Domain = sh.RegRead (key)

    strComputer = "."


    ' Add <Sophos Domain Admins> group to Local <SophosAdministrator> group and remove <Domain Admins>
    DomainString = "Domain Admins"
    LocalString = "SophosAdministrator"
    Set objGroup = GetObject _
    ("WinNT://" & strComputer & "/" & LocalString &",group")
    objGroup.Add ("WinNT://" & Domain & "/Sophos " & DomainString)
    objGroup.Remove ("WinNT://" & Domain & "/" & DomainString)
    textfile.WriteLine LocalString & "Group Modified"


    ' Add <Sophos Domain Users> group to Local <SophosUser> group and remove <Domain Users>
    DomainString = "Domain Users"
    LocalString = "SophosUser"
    Set objGroup = GetObject _
    ("WinNT://" & strComputer & "/" & LocalString &",group")
    objGroup.Add ("WinNT://" & Domain & "/Sophos " & DomainString)
    'objGroup.Remove ("WinNT://" & Domain & "/" & DomainString)
    textfile.WriteLine LocalString & "Group Modified"


    ' Add <Sophos Domain PowerUsers> group to Local <SophosPowerUser> group and remove <Domain Users>
    DomainString = "Domain PowerUsers"
    LocalString = "SophosPowerUser"
    Set objGroup = GetObject _
    ("WinNT://" & strComputer & "/" & LocalString &",group")
    objGroup.Add ("WinNT://" & Domain & "/Sophos " & DomainString)
    objGroup.Remove ("WinNT://" & Domain & "/Domain Users")
    textfile.WriteLine LocalString & "Group Modified"
    AddSophosGroups.cmd

    @echo off
    rem creates domain groups for Sophos Management
    net group "Sophos Domain Admins" /add /comment "member of all local SophosAdministrator groups" /domain
    net group "Sophos Domain Users" /add /comment ""member of all local SophosUser groups" /domain
    net group "Sophos Domain PowerUsers" /add /comment ""member of all local SophosPowerUser groups" /domain
    My Sophos V5 deployment is still in development like yours, but I think you should be ok with these scripts
    Good luck
    Attached Files Attached Files

SHARE:
+ Post New Thread

Similar Threads

  1. Advice needed please
    By Raja in forum Windows
    Replies: 5
    Last Post: 15th October 2007, 12:15 PM
  2. Ghosting Advice Needed
    By Grommit in forum How do you do....it?
    Replies: 4
    Last Post: 2nd September 2007, 10:15 PM
  3. Advice needed
    By richard in forum General Chat
    Replies: 23
    Last Post: 31st May 2006, 05:10 PM
  4. advice needed on weather a new server is needed
    By projector1 in forum Hardware
    Replies: 3
    Last Post: 24th February 2006, 09:20 AM
  5. Sophos advice needed please.
    By Kyle in forum How do you do....it?
    Replies: 6
    Last Post: 1st February 2006, 09:40 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •