With Sophos, I only need to generate the password and give that to a user to be able to allow them to login to the admin page of the Endpoint and do whatever they need to do. The user cannot go ahead and uninstall it. It's kept us much more secure because of this. Should any event happen on a particular system, I'm given the username and the system IP address. I get notifications and can deal with issues right away.