Check that you have an account that can be used to install software

You must have a Windows user account that can be used to install software.

You will be prompted to enter details of a Windows user account that can be used to install security software. It must:

  • Have local administrator rights on computers you want to protect.
  • Be able to log on to the computer where you installed Sophos Enterprise Console.
  • Have Read permission to the location that computers will update from. To check this location, in the Policies pane, double-click Updating, and then double-click Default.
    Note If the Policies pane (bottom left-hand side of the window) is not displayed, on the View menu, click Endpoints.

We recommend that the account:

  • Is not a domain administrator account and is configured for constrained delegation.
  • Has no administrative rights or any elevated privileges on the computer where Sophos Enterprise Console is installed.
  • Has no Write or Modify permission to the location that computers will update from.
  • Is used only for protecting computers and not used for general administrative tasks.
  • Has its password changed frequently.