Understanding Windows and Sophos Groups

  • Article ID: 43283
  • Rating:
  • 10 customers rated this article 3.7 out of 6
  • Updated: 03 Oct 2013

Sophos security software is designed to be operated and administered across a network that already has Users and Groups configured. When you install Sophos products, the software automatically adds certain Windows accounts into the Sophos groups.

Please also refer to the article Which account is used to cleanup malware?

Windows Groups
Before anyone can use a computer - they must have a user created for them that is a member of a Windows Group.  By default - the list of Windows Groups includes :

  • Users - can use applications, but cannot make system changes
  • Power Users - as Users with 'some' privileges to make system changes
  • Administrators - have complete, and unrestricted privileges to make system changes

Sophos Groups
The installation of Sophos Anti-Virus includes the creation of the following Sophos Groups :

  • SophosUser - can use Sophos applications (for example) to run Sophos Anti-Virus
  • SophosPowerUser - as SophosUser, with cleanup privileges
  • SophosAdministrator - have complete, and unrestricted privileges to make changes to the configuration of applications

Automatic Group Integration
At installation the members of the local Windows groups are added to the local Sophos groups - that is :

  • Members of Windows - Users Group are added to the SophosUser Group 
  • Members of Windows - Power Users Group are added to the SophosPowerUser Group
  • Members of Windows - Administrators Group are added to the SophosAdministrator Group

thank you for the feedback

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent