The accounts you need
Before you install Sophos software, you should create the user accounts you need.
You need the following accounts:
- Database account. This is a Windows user account that enables the management service to connect to the
database. It is also used by other Sophos services.
We recommend that you name the database account SophosManagement.
- Update Manager account. This is a Windows user account that enables your endpoint computers to access
the folders where Sophos Enterprise Console puts software updates.
We recommend that you name the Update Manager account SophosUpdateMgr.
- Multi-factor authentication recovery account. This is a Windows user account that is used for multi-factor authentication recovery only. After installing Sophos Enterprise Console, grant multi-factor authentication administrator rights to this user account in role-based administration. Only use this account if a multi-factor authentication device has been lost, to recover the accounts that are usually used.
Note User accounts should not be included in the Windows Protected Users security group. Microsoft's guidelines
state that service accounts should not be added to this group, see Protected Users Security
Group. This is not supported and you must remove user accounts from this group.