Altering local power users for sophos....

[kennysarmy]

When setting up new PC's I always make domain users part of the local power users group - this has always been needed to allow certain software to work.

 

We have just started to roll out Sophos 9.5 and I've noticed the local sophospower users group has pulled it's data from the local power users group which means that when domain users (ie teachers and students) log in they are getting sophos power user rights - which I do not want.

 

the code

 

net localgroup "SophosPowerUser" "curriculum\Domain Users" /delete

 

will delete them but when I put this in the login.bat it does nt run.

It does work if I run it manually logged in with domain admin rights.

 

How can I remotely edit the local sophos power users group to remove domain users from it?

 

Thanks.