Sophos User Groups and AD

Question

Morning,

Just started setting up Sophos Could Endpoint and I've been quite happy with the product thus far.

The question I have relates to Sophos cloud running alongside AD. We run an AD environment but are sticking with the basic level of Sophos Cloud for now (the one without AD intergration, mainly because we don't need any opf the other features of the advanced version yet)

The issue I'm running into is that everytime I do a fresh install, I have to manually add the group "DOMAIN\Domain Users" to the local SophosPowerUsers group otherwise the automated scanner doesn't do any cleanup, just alerts me to the found virus. From reading the regular (non-cloud) version of this software can refer to some special Sophos created Domain Groups.

My question is, does the basic cloud version endpoint client have something similar?

This thread was automatically locked due to age.

jak · Accepted Answer

Hello,

The SAV installer (at time of install) will add all members of:

The local "Administrators" group to "SophosAdministrator"
The local "Power Users" group to "SophosPowerUser"
The local "Users" group to "SophosUser"

The following are worth a look:

http://www.sophos.com/en-us/support/knowledgebase/43283.aspx

http://www.sophos.com/en-us/support/knowledgebase/116816.aspx

As I understand it, if the following domain groups exist before installation:

SophosDomainUser
SophosDomainPowerUser
SophosDomainAdministrator

These will be added to the local Sophos groups of the "same name" for additional control.

The log file: Sophos Anti-Virus Major CustomActions Log_[timestamp].txt will detail these operations, search for: CreateUserGroups and AddDomainGroups.

Regards,

Jak