Sophos clients not updating
This article will tell how to disable the use of external USB-drives, prevent writing to them or run executable files using group policies (GPO).USB device policy will work if an infrastructure complies with these requirements: We are going to restrict the use of USB-drives for all computers in a certain container (OU).Solution: This hot fix updates the Office Scan server and agent files to resolve this issue.(331140 EN_Hotfix_4204) Issue: Scheduled Update is not performed on an Office Scan agent that is not connected to an Office Scan server during startup.After connecting a new USB device to a computer, the system automatically detects the device and installs an appropriate driver allowing a user to use a USB-device or a drive connected practically at once.In some organizations, the use of USB-devices (flash drives, USB HDD, SD cards and so on) is disabled for safety reasons to prevent security leakage and virus infection.
Office Scan 11.0 SP1 Critical Patch resolves the following product issues: (320454 EN_Hotfix_3011.u) Issue: The Office Scan server does not automatically uninstall the following third-party antivirus software before installing the Office Scan agent.The “strongest” lockout policy — All Removable Storage Classes: Deny All Access – allows to deny the access to all types of external storage devices. After enabling and updating the policy on customer computers ( In this policy section, more flexible restriction to use external USB-drives can be configured.For example, to prevent writing to USB flash drives and disks, you should only enable the policy Removable Disk: Deny write access. December 2015 Trend Micro™ Office Scan™ Version 11.0 Service Pack 1 Critical Patch This readme file is current as of the date above.
However, all customers are advised to check Trend Micro's website for documentation updates at Installing several antivirus tools on the same computer can potentially cause issues, to the point where they lock your computer up.