This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Domain Rights

Our domain admins are about to start tidying up rights for all accounts in the domain (its new so several people were given full Domain Admin rights, including me).

The obvious question is, what rights will I need for Sophos management, installation and support?

Is there a knowledgebase article that lists the required user rights for certain tasks?

Thanks in advance!

:13313


This thread was automatically locked due to age.
  • what rights will I need for Sophos management, installation and support

    That depends on your definition of support :smileywink: ...

    Now there is no single article AFAIK and the required permissions depend on the configuration and topology. I'll try to summarize  (not mentioning SEC installation and upgrade) and hope someone will correct me if a make an error.

    Console - if you want to access it on the server you must of course have sufficient rights to log on to the server and additionally be a member of the Sophos Full (or Console) Administrators. If you install a remote console please see article 49028 and perhaps this thread.

    In order to Protect Computers the credentials you use (which you have to enter and are not taken from the logged on user) must of course permit installing software on the client, connecting to and scheduling a task on the client, access to the CID and to log on locally on the management server (see Protect Computers from Enterprise Console 4 for details). If you're using a method other than Protect Computers to (re-)install Sophos this is not required. 

    The above rights are usually sufficient for troubleshooting a client (accessing the filesystem and specifically the logs, accessing the registry, starting and stopping services, ...).

    HTH

    Christian

    :13319