AD Group Cleanup after Enterprise Console Removal

Question

Hi Guys, 
 
 I'm new to the Group, so please be gentle.... I have moved from enterprise console to cloud and I now have a bunch of Sophos Groups left in my AD. Can I just get rid of them or could some of them be related to the Cloud install, how do I find out which is which?

jak · Accepted Answer

You can remove all of the following if you have removed SEC: 
 Groups: 
 
 Sophos Console Administrators 
 Sophos Console Service Users 
 Sophos DB Admins 
 Sophos DB Users 
 Sophos Full Administrators

The user SophosUpdateManager was most likely being used by the endpoint to update from the management server. If all endpoints are now using Central that can also be removed. 
 The group: SophosAdministrator is still in use by the endpoint software so I would leave that one. 
 Regards, 
 Jak