EM Library: accounts and shares created during setup

In order for EM Library to keep your Sophos software up to date, it needs an account with a username and password (credentials) that it can use to access and download the required packages and updates.

When you are installing EM Library, the setup program offers to create an account for you. The default is a local installation and account. EM Library shares are created at the same time.

There are two ways in which you can use EM Library, and each requires a different type of account.

• If you install a single version of EM Library, which manages a Central Installation Directory (CID) on the same computer, and all your computers update from this CID, then the local account, which can be created by EM Library during setup, is the correct one to use.

• If you want to use EM Library to manage CIDs on one or more remote computers, or if you use multiple libraries that access each other via UNC, EM Library will need you to create a network account, not a local account.

The following sections describe the user accounts and shares that EM Library creates during installation. For details of how to administer users, groups and shares, refer to your Windows documentation.

EM Library accounts

Windows 2000 and Windows 2003 servers used as domain controllers

EM Library requires a network account, which also needs Log on as a batch job assigned to it. When you install EM Library on this server:

• EM Library creates a user called EMLibUser1. This user is a member of the groups:
  • Administrators
  • Domain Users
• EM Library also creates a group called EMLibrary Users. This group contains the following members:
  • Administrators
  • Domain admins
  • Enterprise admins

Servers and workstations that do not have control over a domain

EM Library only requires a local account on these computers.

• EM Library creates a user called EMLibUser1. This user is a member of the group:
  • Administrators
• EM Library also creates a group called EMLibrary Users. This group contains the member:
  • Administrators

EM Library shares

During installation EM Library creates two shared folders:

• 'SophosEM', the EM Library share, located by default at C:\Program Files\Sophos Enterprise Manager\Library
• 'InterChk', the CID share, located by default at \\<servername>\InterChk

The permissions for these shares are set as: 'Everyone' is allowed 'Full Control', 'Change' and 'Read'.