Sophos role-based administration tools release notes ---------------------------------------------------- Product version : 1.0 www.sophos.com Contents -------- Main features Known problems Additional information Main features ------------- Sophos role-based administration tools allow you to give members of your security team access to Sophos Enterprise Console, based on their role in the organization. There are two administration consoles: * Sophos Enterprise Read-Only Console This console displays all the computer groups that are managed by Enterprise Console. It enables a user to view the dashboard, computer status, and reports, but not to view or change policies or to carry out any remedial actions. * Sophos Helpdesk Console This console displays selected computer groups that are managed by Enterprise Console. It enables a user, such as an IT help desk administrator, to view computer status and reports, and to carry out remedial actions (protect, update, scan and clean up computers, acknowledge alerts, and ensure computers comply with policies). There is also a utility that you need in order to configure Helpdesk Console for a user: * Sophos Helpdesk Console Configuration Utility This utility is run on the server where Sophos Enterprise Console is running. You use it to specify which groups of computers the Helpdesk Console user can manage. Known problems -------------- Some descriptions include the relevant identifier in brackets. You can use this if you need to contact Sophos technical support. * (DEF 16464) If you run multiple copies of Helpdesk Console and Enterprise Read-only Console on a large network, the performance of Sophos Enterprise Console may be affected. For help with this problem, see Sophos support knowledgebase article 35133. This can be found at http://www.sophos.com/support/knowledgebase/article/35133.html * (DEF 18745) In Helpdesk Console Configuration Utility, in the list of "Computers running Helpdesk Console", you can click the column headings Computer" and "User", but this does not sort the contents of the columns. * (DEF 17458) If a computer is disconnected while you are configuring it with Helpdesk Console Configuration Utility, your settings are lost. If a computer is disconnected from the network while you are configuring its Helpdesk Console settings with Helpdesk Console Configuration Utility, an error message is displayed. When you click "OK",you are not returned to the dialog where you enter the settings. Instead, you are returned to the initial Helpdesk Console Configuration Utility dialog box and your settings are discarded. * (DEF 17538) If you right-click the taskbar icon for Helpdesk Console or Enterprise Read-only Console, a menu is displayed, but clicking the options (Restore, Move, Size, Minimize, Maximize or Close) has no effect. * (DEF 18183) In Enterprise Read-only Console, if you open the Reporting pages, and attempt to specify a group of computers in the "Location" field, the "All computers not in a group" option is missing from the drop-down menu. * (DEF 17329) In Enterprise Read-only Console, when the display refreshes itself, it may shift the focus from the help files (if you have them open) to the console. This happens only on Windows 2000 computers. * (DEF 19194) In the Simplified Chinese version of the Enterprise Read-Only Console setup program, the word "install" has been translated as "uninstall". * (DEF18739) In Helpdesk Console, the view may shift from a subgroup to a top level group without any user interaction. This may happen if a network administrator adds, deletes or renames groups in Enterprise Console (whether or not the affected groups are displayed in Helpdesk Console). It may also happen if Helpdesk Console is left running for about thirty minutes or longer. * (DEF 17733) In the Italian and German versions of Helpdesk Console, there is an incorrect link in the help files. If you go to the "Introduction to Helpdesk Console" section, open "What is a policy?", click the hyperlink for "HIPS" and then click back, you are directed to a duplicate "What is a policy?" page in a different section of the help file. Additional information ---------------------- If you want to prevent a Helpdesk Console user from modifying the way the console has been set up, e.g. the groups that can be managed, you can do so. Install Helpdesk Console on the user's computer before (rather than after) you use the Configuration Utility to specify the settings for that computer. This sets user permissions in the registry so that only administrators can access the settings. NB If the user has local administrator privileges on the computer, they will still be able to access the settings.