Add the computer account into the dashboard immeditately after agent installation, even before a user logs in.(Currently, if the agent is installed remotely, it won't connect until a user logs in)
Add download permissions on access control policies
Add permissions in access control policies to prevent downloading content such as email attachments, printed documents, reports, etc. restrictions on manager accountsThese restrictions should also be available to apply to manager accounts