This article describes the SophosSAU0 account; what it is and its usage.
The SophosSAU account is an impersonation account created for use by Sophos AutoUpdate service.
Sophos AutoUpdate user accounts are created in the following format: SophosSAU[machinename]aaa.
To avoid collision when installing on DCs with account replication, the last three characters are alphabetic as opposed to a single integer of 0-9. These characters start with "aaa" and ascend their way through the alphabet sequence (both lower and upper case) if Sophos AutoUpdate's installer recognises a collision. Once a character reaches "Z" + 1, the next iteration will be created with the next 'significant' letter increased to the next letter in alphabet.
SophosSAU[machinename]aaa ... SophosSAU[machinename]aaZ SophosSAU[machinename]aba ... SophosSAU[machinename]aZZ SophosSAU[machinename]baa ...
In earlier versions of Sophos AutoUpdate the SophosSAU account was formatted in the following way: SophosSAU[machinename]0-9
Yes. You will need to edit the HKLM\Software\Sophos\AutoUpdate\Service registry key and enter the credentials of an account that can be used for this impersonation.
See, How to set a new obfuscated SophosSAUhostname (Sophos AutoUpdate impersonation account) password.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.