This article describes the options available to you in order to deploy Sophos Central managed software to your computers.
Applies to the following Sophos product(s) and version(s)
What To Do
Determine the best method or methods to deploy to your users; the options are:
- Email deployment from Sophos Central
From Sophos Central, under 'People' you can create a new Sophos Central user and email an installer by ensuring 'Email Setup link' is checked'.
- The installers linked from the Sophos Central emails are specific to the emailed user and should only be run on devices that particular user needs to protect. This ensures that all logins on each device they protect are attributed to same Sophos Cloud user.
- Protecting mobile devices requires you to use the email deployment method. For more information on protecting mobile devices see article 120777.
- Custom email deployment
If you wish to customize a deployment email for your users or send an email to a distribution group, we recommend you use the non-user specific install links. These can be found under 'Deploy Agents'.
After the user installs the software using these links/installers, a new Sophos Central user will automatically be created in Sophos Central based on their logon name. This username can be edited as required to better reflect the user.
- Scripted installation
For deployment within an organisation or as part of a custom package the installers can be scripted. A typical use case would be installing via third-party deployment tools such as Microsoft SCCM or Active Directory. It is also possible to create a 'full' installer for Windows to minimize the initial download if bandwidth is a concern. For more information see articles:
- Inclusion in an image
If required, the Sophos Central software can be included in an image. For guidance on performing this see the relevant article:
- The Windows server and client installer is the same SophosInstall.exe file. The installer automatically checks the operating system being installed to and as a result obtains a different set of credentials to download the appropriate software.
- If the Windows computers have one or more of the following components installed these will need to be removed before running the Sophos Central installer:
- Sophos Compliance Agent.
- Sophos Patch.
- Sophos Client Firewall.
- Sophos Encryption as managed by Enterprise Console.
- Sophos Anti-Virus, if the following components have been enabled on the computer:
- Web control.
- Data control.
- Application control.
- To install Sophos Cloud Web Gateway, see article 122663.
- For details on how to remove Sophos products, see article 118849.
- Common return codes from the Windows installer, see article 120449.
- Sophos Central installer and the detection of other security software, see article 119619.
- Sophos Central installer log files, see article 119621.