Sophos Windows users and groups - Sophos Central Managed PCs

Hi mh3000

When Sophos endpoint is installed, the members of the local Windows groups are added to the local Sophos groups.

Please check this link for more information regarding the task that can be performed. 

These groups are not used for Sophos Central endpoints and is likely just code carried over from Enterprise Console managed endpoints.  These groups are used in that version but in the Sophos Central version they serve no purpose.  They will delete on uninstall of the software or you can delete them now as it will not affect the software in any way.

Hello Shweta, sorry for my late response and thank you for your answer

I read the link that you referenced, but the documentation says it is for Sophos Endpoint Security and Control.

Does this also apply to the Sophos Central Agent?

Hello MEric, 

Thanks for the information.

Do you know any Sophos Central article/KBA that mentions this? I couldn't find no related information into this Sophos Central Documentation

Thanks in advance!

To correct some older comments:

For Central those groups are purely used by SAV for COM to COM component communication, so they have no 'User' effect.

They are definitely required, so if you delete them certain functionality will not work and you would likely need to reinstall the product to fix it. We will have official documentation coming up about it, but no KB article for now to share. No best practices steps aside from not modifying or deleting them.