This is for the documentation page https://doc.sophos.com/nsg/sophos-firewall/19.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/RemoteAccessVPN/IPsecSSL/SophosConnect/RAVPNSConClientGPOScript/index.html#install-the-sophos-connect-client
To deploy an MSI via GPO, there is no need for a logon script. The following can be used: