Avoid duplicate accounts in the People section in the Sophos Centra console.

Also, if the device will be wiped and re-assign to a new employee I can see on Sophos Central/Device section the device is duplicated, is there any solution?

Thank you. 

Hi, 

In MacOS those admin accounts are distinct entities created locally for each device. Although they all have the same name, they are technically different accounts. 

I can understand the frustration of having to deal with this. 

However, you should only be logging in with that admin account once or twice. Or are you using more frequently?

Hi Richard, 

Thanks for your reply.

I am enrolling around 200 devices Macs and Windows into the MDM and during the enrollment Sophos Intercept X will be installed.

During the process of enrolling the device, a local support account called ADMIN will be created. Because I will need to log in from the admin account to obtain the FileVault Security Token to make the admin able to unlock the drive, Sophos will register the admin as a user besides the primary user who will use the device every day.

As I understood the only way is to delete manually the entries from the Sophos Endpoint Console, is it right?

Thank you,

Vincenzo

that is the most straight forward method.

For a single deploy you probably want to do this. However, if scenarios like this will be common (happen more than once a year) for you, you might want to invest in creating a script that uses our API to mass delete elements. 

If you're interested, you can find more information here. 

https://developer.sophos.com/

If it's a 'one and done' scenario - then that's probably not worth it.

MacOS user accounts are always a little tricky to deal with in these sorts of scenarios. For AD accounts we can check the UUID and remove duplicates. These accounts, though, are unique to themselves and only really match on the display name.

I will note this down and bring it up with the development team the next time I talk to them. Maybe we can find a solution that avoids this sort of bulk action.

that is the most straight forward method.

For a single deploy you probably want to do this. However, if scenarios like this will be common (happen more than once a year) for you, you might want to invest in creating a script that uses our API to mass delete elements. 

If you're interested, you can find more information here. 

https://developer.sophos.com/

If it's a 'one and done' scenario - then that's probably not worth it.

MacOS user accounts are always a little tricky to deal with in these sorts of scenarios. For AD accounts we can check the UUID and remove duplicates. These accounts, though, are unique to themselves and only really match on the display name.

I will note this down and bring it up with the development team the next time I talk to them. Maybe we can find a solution that avoids this sort of bulk action.