Hi I have recently started a new job at a college and have encountered a problem that colleagues and myself are struggling to resolve. The college runs a Windows based servers which also run Active Directory, Ranger 5 Desktop Management and Sophos Anti-Virus. When the students log on the anti-virus software automatically runs an update in the windows temp directory which is fine however we would like to allow only the Sophos AV to run in the temp directory and exclude all other software applications from utilising the directory to stop the students from running their own malicious.exe's. As to date the only way we have found to stop the students from doing this is to deny all access to the windows temp which obviously stops Sophos AV from updating. Q. How do we manage the exclusions to resolve this issue. Thanking You Regards M