How to deploy the Sophos Central software

  • Article ID: 119265
  • Rating:
  • 17 customers rated this article 4.9 out of 6
  • Updated: 14 Apr 2016

This article describes the options available to you in order to deploy Sophos Central managed software to your computers.

Applies to the following Sophos product(s) and version(s)
Sophos Cloud

What To Do

Determine the best method or methods to deploy to your users; the options are:

  1. Email deployment from Sophos Central

    From Sophos Central, under 'People' you can create a new Sophos Central user and email an installer by ensuring 'Email Setup link' is checked'. 

    • The installers linked from the Sophos Central emails are specific to the emailed user and should only be run on devices that particular user needs to protect. This ensures that all logins on each device they protect are attributed to same Sophos Cloud user.
    • Protecting mobile devices requires you to use the email deployment method.  For more information on protecting mobile devices see article 120777.

  2. Custom email deployment

    If you wish to customize a deployment email for your users or send an email to a distribution group, we recommend you use the non-user specific install links. These can be found under  'Deploy Agents'.

    After the user installs the software using these links/installers, a new Sophos Central user will automatically be created in Sophos Central based on their logon name. This username can be edited as required to better reflect the user.

  3. Scripted installation

    For deployment within an organisation or as part of a custom package the installers can be scripted. A typical use case would be installing via third-party deployment tools such as Microsoft SCCM or Active Directory.  It is also possible to create a 'full' installer for Windows to minimize the initial download if bandwidth is a concern. For more information see articles:
  4. Inclusion in an image

    If required, the Sophos Central software can be included in an image. For guidance on performing this see the relevant article:


  • The Windows server and client installer is the same SophosInstall.exe file. The installer automatically checks the operating system being installed to and as a result obtains a different set of credentials to download the appropriate software.
  • If the Windows computers have one or more of the following components installed these will need to be removed before running the Sophos Central installer:
  • Sophos Compliance Agent.
  • Sophos Patch.
  • Sophos Client Firewall.
  • Sophos Encryption as managed by Enterprise Console.
  • Sophos Anti-Virus, if the following components have been enabled on the computer:
    • Web control.
    • Data control.
    • Application control.

See Also

  • To install Sophos Cloud Web Gateway, see article 122663.
  • For details on how to remove Sophos products, see article 118849.
  • Common return codes from the Windows installer, see article 120449.
  • Sophos Central installer and the detection of other security software, see article 119619.
  • Sophos Central installer log files, see article 119621.

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent