About Active Directory synchronization

Active Directory synchronization allows administrators to implement a service that maps users and user groups from the Active Directory to Sophos Central.

To synchronize with Active Directory, you need to download and install the Sophos Central Active Directory Sync utility. The utility works as follows.

It synchronizes active users and user groups.

It can run automatically regularly, as set up by the Sophos Central administrator.

It doesn't duplicate existing users or groups when they match an existing Sophos Central user or group. For example, it can add an email address from Active Directory to an existing user in Sophos Central.

It supports only the Active Directory service.

It doesn't help you to deploy the Sophos agent software to your users' devices. Use other methods of deployment with Active Directory.