Sophos Anti-Virus for Windows 2000+: how to manage web content scanning policies

Issue
This article describes how to centrally enable or disable Sophos web content scanning. 

• For details of how to do this locally, see How to locally enable or disable Sophos web content scanning. 

What to do

1. To set a policy for a group

1. From Windows Control Panel, go to Administrative Tools, and open the Group Policy Management Console.
2. Select the required policy and click 'Edit'. The Group Policy Editor window opens.
3. Under Local Computer Policy, select:
   Computer Configuration|Administrative Templates|Windows Components|Internet Explorer|Security Features.
4. Open Add-on Management and double-click Add-on List.
5. On the Setting tab, select 'Enabled' then click 'Show...'
6. The 'Show Contents' window opens to display the list of managed add-ons.
7. Click 'Add...'. In the Add Item dialog box, you are prompted for information:
   • In the 'Enter the name of the item to be added:' field, type in the name of the item. This is the CLSID (class identifier) of the Sophos BHO (Browser Help Object), type in:
     {39EA7695-B3F2-4C44-A4BC-297ADA8FD235}
   • In the 'Enter the value of the item to be added:' field, enter one of the following values, either 0, 1, or 2, as appropriate:
     • 0    The add-on is disabled for all users of this computer
     • 1    The add-on is enabled for all users of this computer
     • 2    The add-on is allowed and the state can be controlled via the Add-on Manager in Internet Explorer.
8. Click OK|OK|Apply.
9. Additional options may be then selected, for example, from
   Computer Configuration|Administrative Templates|Windows Components|Internet Explorer, a number of options are displayed, including:
   • Do not allow users to enable or disable add-ons
   • Disable changing Advanced page settings
     

2. To set an Add-on policy for an individual user

1. From Windows Control Panel, go to Administrative Tools, and open the Group Policy Management Console.
2. Select the group the user belongs to and click 'Edit'. The Group Policy Editor window opens.
3. In the tree on the left, Under User Configuration, go to:
   Administrative Templates|Windows Components|Internet Explorer|Security Features|Add-on Management
4. From here, configure policy for the selected individual(s).