How to create a New Security Officer on Sophos SafeGuard


  • In this article, we will create a new security officer on Sophos SafeGuard.

Network Diagram


On DC – SafeGuard Server

  • Open SafeGuard Management Center and enter your password to login.
  • Select Users and Computer.
  • Right-click on Micheal and select Make this user a security officer.
  • Tick Audit Officer and click OK twice.
  • In SafeGuard Management Center select Security Officers.
  • Expand Security Officers in the tree-view and verify that micheal@VACIF.COM is listed.
  • In the left-hand pane expand Predefined Roles and select Audit Officer.
  • Review the actions permitted by standard Audit Officer role.
  • In the ‘Users and computers’ section, select VACIF.COM in the left-hand tree-view and then select the Access tab.
  • Drag micheal@VACIF.COM from the right-hand ‘Officer’ pane into the main ‘Access’ pane.
  • This give ‘micheal@VACIF.COM’ full access to the VACIF.COM domain.
  • Click Save, then Close and restart the SafeGuard Management Center.
  • Select micheal@VACIF.COM from the drop-down list.
  • Enter Micheal’s password and click OK.
  • Open the Tools menu and select Configuration Package Tool.
  • You will see that the Audit Officer can view but not change or create configuration packages.
  • Select Close.
  • Select Policies > Policy Items > File Encryption.
  • Right-click on [Default] File Encryption.
  • In ‘File Encryption’ pane try to select and change some of the drop-down settings.
  • Note that policy settings cannot be changed because the Audit role does not have permissions to make changes to polices.
  • Right-click Policy Items and try to create a new policy.
  • As Audit Officer you won’t be able to.
  • Select Reports
  • Which Reports are available to the Audit Role.

Be the first to comment

Leave a Reply

Your email address will not be published.


This site uses Akismet to reduce spam. Learn how your comment data is processed.