This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos AD sync worth it?

Hey so i just came into a new environment. They use sophos central with agents on the computers.

They have users in the central management, although possibly not all of them.

Just wondering what the benefits are of configuring sophos central AD sync. What do i get from it specifically? I have always had it installed in our old environment, so i am not sure what difference it makes. Just adds AD users to the list of users? does it do anything else when i hit sync on it? And what benefits do i get from doing this? let me know please. thanks.



This thread was automatically locked due to age.
  • Hi, 

    To further understand the function and it's  advantage of the said feature we'll be sharing you this documentation that explains about AD sync functions. 

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  Visit Sophos Techvids
  • sure but that doesnt really explain anything in any detail whatsoever.

    "The utility works as follows. It synchronizes active users and user groups."

    but WHY am i doing that. Since not having it synced, it will pick up the user from the machine anyway. So whats the point of it?

  • It's if you want things sorted and organized into your AD groups - mostly.

    You can also pre-assign users into specific policies if you need to. 

    It isn't a required element - you can manually manage the policies.

    If you don't have a bunch of different policy requirements for different groups of users then you can just apply on blanket policy and that will work. 

    RichardP

    Program Manager, Support Readiness | CISSP | Sophos Technical Support
    Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • It's also useful if you implement Phish Threat as it pre-fills all user data and email address for you.  It's worth it even to run a trial of phish threat and gauge if you should invest in some user training and acquire phish threat itself.  it's not even that difficult to setup

    But yes as already mentioned, by others, if you are just applying single blanket policies across all workstations / users then there is no other need for sophos ad sync.