Sophos security software is designed to be operated and administered across a network that already has Users and Groups configured. When you install Sophos products, the software automatically adds certain Windows accounts into the Sophos groups.
Please also refer to the article Which account is used to cleanup malware?
Before anyone can use a computer - they must have a user created for them that is a member of a Windows Group. By default - the list of Windows Groups includes :
- Users - can use applications, but cannot make system changes
- Power Users - as Users with 'some' privileges to make system changes
- Administrators - have complete, and unrestricted privileges to make system changes
The installation of Sophos Anti-Virus includes the creation of the following Sophos Groups :
- SophosUser - can use Sophos applications (for example) to run Sophos Anti-Virus
- SophosPowerUser - as SophosUser, with cleanup privileges
- SophosAdministrator - have complete, and unrestricted privileges to make changes to the configuration of applications
Automatic Group Integration
At installation the members of the local Windows groups are added to the local Sophos groups - that is :
- Members of Windows - Users Group are added to the SophosUser Group
- Members of Windows - Power Users Group are added to the SophosPowerUser Group
- Members of Windows - Administrators Group are added to the SophosAdministrator Group