The user is not assigned to any sub-estates.

Question

Running Windows Server 2019 Version 1809 (OS Build 17763.1339) member server and Sophos Enterprise Console 5.5.1 
 When trying to open Enterprise Console, a pop-up appears with: 
 Cannot open Enterprise Console 
 The user <domain\user> is not assigned to any sub-estates. You must be a member of at least one sub-estate to run the console. 
 The domain user account that is used is direct member of the local "Sophos Full Administrators" group. (so no nested groups), this user account is also direct member of "Sophos Console Administrators" group. 
 When logging in as local administrator on this server I can open the Sophos console without problems. 
 What user right am I missing when logging in as domain user? 
 Best regards, 
 Wim

- -40 · Answer

Managed so solve/workaround this problem. 
 Opened up Sophos Enterprise console as local admin. 
 "C:\Program Files (x86)\Sophos\Enterprise Console\EnterpriseConsole.exe" >> Shift-right click >> run as different user (.\administrator) 
 Then I added my user account as a &lsquo;System Administrator&rsquo; in Manage Roles and Sub-Estates 
 And I added my user account to &lsquo;Default&rsquo; sub-estate 
 
 Although &lsquo;Sophos Full Administrators&rsquo; is already member of these groups in Manage Roles and Sub-Estates, adding my user account did the trick. Looks like the local security group &lsquo;Sophos Full Administrators&rsquo;, where my user account is a direct member of, does not work. 
 Hoping to help someone with the same issues. 
 Regards, Wim