This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Windows users and groups - Sophos Central Managed PCs

Hello everyone, 

We have a Sophos Central account with wich we manage endpoint protection on computers. 

When the Sophos Central Agent (Core Agent, Endpoint Advanced and Intercept X components) is installed, the following user groups are generated locally and into our AD domain:

I have the following questions:

What is the goal of this groups?

Are there any best practices that I should be aware regarding this topic?

Thank you.



This thread was automatically locked due to age.

Top Replies

  • To correct some older comments:

    For Central those groups are purely used by SAV for COM to COM component communication, so they have no 'User' effect.

    They are definitely required, so if you delete them certain functionality will not work and you would likely need to reinstall the product to fix it. We will have official documentation coming up about it, but no KB article for now to share. No best practices steps aside from not modifying or deleting them.

    Jump to answer
Parents
  • These groups are not used for Sophos Central endpoints and is likely just code carried over from Enterprise Console managed endpoints.  These groups are used in that version but in the Sophos Central version they serve no purpose.  They will delete on uninstall of the software or you can delete them now as it will not affect the software in any way.

Reply
  • These groups are not used for Sophos Central endpoints and is likely just code carried over from Enterprise Console managed endpoints.  These groups are used in that version but in the Sophos Central version they serve no purpose.  They will delete on uninstall of the software or you can delete them now as it will not affect the software in any way.

Children