McAfee EPOCDE-AA-BA Product Guide - Page 143
Select Active Directory Container, Active Directory domain
View all McAfee EPOCDE-AA-BA manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 143 highlights
Organizing the System Tree Creating and populating groups 12 3 Next to Synchronization type, select Active Directory. The Active Directory synchronization options appear. 4 Select the type of Active Directory synchronization you want to occur between this group and the desired Active Directory container (and its subcontainers): • Systems and container structure - Select this option if you want this group to truly reflect the Active Directory structure. When synchronized, the System Tree structure under this group is modified to reflect that of the Active Directory container it's mapped to. When containers are added or removed in Active Directory, they are added or removed in the System Tree. When systems are added, moved, or removed from Active Directory, they are added, moved, or removed from the System Tree. • Systems only - Select this option if you only want the systems from the Active Directory container (and non-excluded subcontainers) to populate this group, and this group only. No subgroups are created when mirroring Active Directory. 5 Select whether a duplicate entry for the system will be created for a system that already exists in another group of the System Tree. McAfee does not recommend selecting this option, especially if you are only using the Active Directory synchronization as a starting point for security management and use other System Tree management functionality (for example, tag sorting) for further organizational granularity below the mapping point. 6 In Active Directory domain you can: • Type the fully-qualified domain name of your Active Directory domain. • Select from a list of already registered LDAP servers. 7 Next to Container, click Add and select a source container in the Select Active Directory Container dialog box, then click OK. 8 To exclude specific subcontainers, click Add next to Exceptions and select a subcontainer to exclude, then click OK. 9 Select whether to deploy agents automatically to new systems. If you do, be sure to configure the deployment settings. McAfee recommends that you do not deploy the agent during the initial import if the container is large. Deploying the 3.62 MB agent package to many systems at once may cause network traffic issues. Instead, import the container, then deploy the agent to groups of systems at a time, rather than all at once. Consider revisiting this page and selecting this option after the initial agent deployment, so that the agent is installed automatically on new systems added to Active Directory. 10 Select whether to delete systems from the System Tree when they are deleted from the Active Directory domain. Optionally choose whether to remove agents from the deleted systems. McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 143