McAfee EPOCDE-AA-BA Product Guide - Page 131

Organizing the System Tree How a system is added to the System Tree when sorted 12 The sorting order assigned to each subgroup (defined in the Group Details tab) determines the order that subgroups are considered by the server when it searches for a group with matching criteria. 1 The server searches for a system without an agent GUID (its agent has never called in before) with a matching name in a group with the same name as the domain. If found, the system is placed in that group. This can happen after the first Active Directory or NT domain synchronization, or when you have manually added systems to the System Tree. 2 If a matching system is still not found, the server searches for a group of the same name as the domain where the system originates. If such a group is not found, one is created under the Lost&Found group, and the system is placed there. 3 Properties are updated for the system. 4 The server applies all criteria-based tags to the system if the server is configured to run sorting criteria at each agent-server communication. 5 What happens next depends on whether System Tree sorting is enabled on both the server and the system. • If System Tree sorting is disabled on either the server or the system, the system is left where it is. • If System Tree sorting is enabled on the server and system, the system is moved based on the sorting criteria in the System Tree groups. Systems that are added by Active Directory or NT Domain synchronization have System Tree sorting disabled by default, so they are not sorted on the first agent-server communication 6 The server considers the sorting criteria of all top-level groups according to the sorting order on the My Organization group's Group Details tab. The system is placed in the first group with matching criteria or a catch-all group it considers. • Once sorted into a group, each of its subgroups are considered for matching criteria according to their sorting order on the Group Details tab. • This continues until there is no subgroup with matching criteria for the system, and is placed in the last group found with matching criteria. 7 If such a top-level group is not found, the subgroups of top-level groups (without sorting criteria) are considered according to their sorting. 8 If such a second-level criteria-based group is not found, the criteria-based third-level groups of the second-level unrestricted groups are considered. Subgroups of groups with criteria that doesn't match are not considered. A group must have matching criteria or have no criteria in order for its subgroups to be considered for a system. 9 This process continues down through the System Tree until a system is sorted into a group. If the server setting for System Tree sorting is configured to sort only on the first agent-server communication, a flag is set on the system. The flag means that the system can never be sorted again at agent-server communication unless the server setting is changed to enable sorting on every agent-server communication. 10 If the server cannot sort the system into any group, it is placed in the Lost&Found group within a subgroup that is named after its domain. McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 131