Add a user to a Sophos group

If you are a domain administrator or a member of the Windows Administrators group on this computer, you can change the Sophos group in which a user has membership. You would typically do this in order to change their access rights to Sophos Endpoint Security and Control.

To add a user to a Sophos group:

  1. Using Windows, open Computer Management.
  2. In the console tree, click Users.
  3. Right-click the user's account, and then click Properties.
  4. On the Member Of tab, click Add.
  5. In Enter the object names to select, type one of the Sophos group names:
    • SophosAdministrator
    • SophosPowerUser
    • SophosUser
  6. If you want to validate the Sophos group name, click Check Names.
When the user next logs on to the computer, they will find that their access rights to Sophos Endpoint Security and Control have changed.


  • To open Computer Management, click Start, and then click Control Panel. Double-click Administrative Tools, and then double-click Computer Management.
  • To remove the user from a Sophos user group, on the Member Of tab, select the group in Member of, and then click Remove.