Sophos Windows users and groups - Sophos Central Managed PCs

Question

Hello everyone, 
 
 We have a Sophos Central account with wich we manage endpoint protection on computers. 
 
 When the Sophos Central Agent (Core Agent, Endpoint Advanced and Intercept X components) is installed, the following user groups are generated locally and into our AD domain:

I have the following questions: 
 
 What is the goal of this groups? 
 
 Are there any best practices that I should be aware regarding this topic? 
 
 Thank you.

PavSupport · Accepted Answer

To correct some older comments: 
 For Central those groups are purely used by SAV for COM to COM component communication, so they have no 'User' effect. 
 They are definitely required, so if you delete them certain functionality will not work and you would likely need to reinstall the product to fix it. We will have official documentation coming up about it, but no KB article for now to share. No best practices steps aside from not modifying or deleting them.

Windows group	Sophos group
Administrators	SophosAdministrator
Power Users	SophosPowerUser
Users	SophosUser

Sophos Windows users and groups - Sophos Central Managed PCs

Top Replies