Advisory: Support Portal Maintenance. Login is currently unavailable, more info available here.
I received an alert "A computer does not comply with its Sophos Central policy", but the user specified as the last user has never signed into the device. Upon further inspection I found this user to be associated with four other computers that she has never logged into, and that are in an office the user has never been to. All systems show no user profile for this user and log archives show no activity for this account on the systems specified by Sophos Central. Is this a bug in Sophos Central?
By any chance was there any cloning activity conducted using the Users device (the one which has been observed that on the other machines) to the other devices previously? Also what policy is showing on the machines that is not compliant.
No cloning has taken place in the last few months. The laptop that I was working on has had Sophos installed on it for over a year. I've deleted the user and am waiting to see if she is re-associated with these machines once re-added.
Yes you can try to delete this but you need to check first each of the account if it does shows active on your central dashboard. Once validated that it's not active, you can proceed on deleting the account.
I have the same issue did you get this resolved