Windows Thread, Sophos AD integration and policies. in Technical; Ok so now Sophos is properly integrating with AD *whoop* but I now have an issue with applying policies to ...
5th October 2009, 12:36 PM #1
Sophos AD integration and policies.
Ok so now Sophos is properly integrating with AD *whoop* but I now have an issue with applying policies to the clients.
I have AD arranged into groups such as Classroom machines which is split up into year groups. I want to apply a policy at the year group level and it filter down to the year group folder and machines. However this doesn't seem to happen in Sophos.
Does anyone know if this is possible or do I have to apply the correct policy at each level?
IDG Tech News
5th October 2009, 12:45 PM #2
I am confused. I create 3 groups in the sophos console one for fixed pc, servers and laptops. Each group has all the correct sophos settings for that type of machine. Example laptops might have internal and county council settings so that it will update in school or at home.
Once you have all the groups set up drag the machines into the correct group in the sophos console.
Why would you want to apply policy settings by year????????
5th October 2009, 12:58 PM #3
Well, Sophos has imported my AD structure and set to sync with it every so often so Sophos is always up to date with machines and where they are and what AV policy should apply.
Therefore the folder structure in Sophos mirrors my AD structure. I arrange my computers in year groups to make GPO management easier. So at the top level in AD I have an OU for classroom machines with year group OUs underneath, an OU for domain controllers, and an OU for teacher laptops.
I have different AV policies for the different groups, the issue is that for the Classroom folder in Sophos I want to apply it to the top level folder and have it filter down to the subgroups and clients.
Hope that makes it clearer.
1st December 2009, 12:40 PM #4
Did you discover a way to get it to filter down? I'm trying to do a similar thing and can't face going to each 'group' and setting it manually!!!
1st December 2009, 12:43 PM #5
Unfortunately not, I ended up setting it at each level
Originally Posted by bmdixon
1st December 2009, 12:44 PM #6
By GoldenWonder in forum Wireless Networks
Last Post: 8th May 2009, 01:50 AM
By binky in forum Comments and Suggestions
Last Post: 21st April 2009, 01:42 PM
By edsa in forum How do you do....it?
Last Post: 2nd April 2009, 06:25 PM
Last Post: 19th November 2007, 01:49 PM
By Dos_Box in forum Wireless Networks
Last Post: 12th December 2006, 01:15 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)