How to automatically assign a Mac endpoint to a defined group in Sophos Enterprise Console

  • Article ID: 119791
  • Rating:
  • 6 customers rated this article 5.5 out of 6
  • Updated: 09 Feb 2015

This article explains how to modify the Sophos Anti-Virus for Mac OS X installer to allow the Sophos Enterprise Console to automatically assign the endpoint to a pre-defined group.

Known to apply to the following Sophos product(s) and version(s)

Sophos Anti-Virus for Mac OS X v9.0.5+


What To Do


  1. Create a file called grouppath.plist which contains the following content:

    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "">
    <plist version="1.0">

    Note:  The value passed in to 'GroupPath' must:

    • is case sensitive
    • must not end in a backslash
    • must start with the name of the management server

    Example: \SecServerName\TopLevelGroup\Group

  2. Take a copy of the Sophos Anti-Virus for Mac OS X installer from the Distribution Location and place this in a new location.  By placing this Installer in a new location this prevents Sophos Update Manager (SUM) from removing the grouppath.plist file once we have added it

  3. Place the grouppath.plist file into the installer in the following location:
    • For Sophos Anti-Virus for Mac OS X version 9.0 and 9.1
      • Sophos Anti-Virus.mpkg/Contents/Packages/SophosRMS.mpkg/Contents/Resources/grouppath.plist
    • For Sophos Anti-Virus for Mac OS X version 9.2+
      • Sophos Installer Components/RMS/grouppath.plist

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent