[KB7819] Managing computers using Active Directory synchronization in ESET PROTECT On-Prem (Windows)

Issue

• Manage computers via Active Directory synchronization in ESET PROTECT On-Prem

Solution

1. Prerequisites
2. View unmanaged client computers in Active Directory
3. Remove client computers that are no longer available or disabled in Active Directory
4. Remove duplicate computers automatically

I. Prerequisites

• ESET PROTECT On-Prem Server installed
• Network infrastructure using Active Directory

II. View unmanaged client computers in Active Directory

After the Active Directory computers are synchronized to ESET PROTECT On-Prem, you can filter computers that are not managed by ESET PROTECT On-Prem by filtering them in a generated report.

1. Open the ESET PROTECT Web Console.

2. Click Reports → Add Report Template.

   

3. Type a name for the report into the Name field and click <No category selected>.

   

4. Select the check box next to Computers and click OK.

   

5. Click Chart and select the check box under Display Table.

   

6. Click Data → Add Column.

   

7. Click Computer → Computer name → OK.

   

8. Click Add Column → Computer → Managed computer → OK.

9. When you have added both columns, click Finish.

   

10. Find the report you have created, click the gear icon, and click Generate Now.

    

11. The unmanaged computers will have no in the Managed computer column. You can click Generate and Download to download the report as a CSV file and filter the unmanaged computers in the report.

    

III. Remove client computers that are no longer available or disabled in Active Directory

You have two options for removing client computers that are no longer available or are disabled in Active Directory:

• Using the Static Group Synchronization server task:

  In the Settings section, select Remove from the Computer Extinction Handling drop-down menu.

  

• Using the Delete Not Connecting Computers server task.

IV. Remove duplicate computers automatically

If there are two computers with the same name and they are both listed in the Computers section of ESET PROTECT On-Prem, these duplicate records are most likely caused by the reinstallation of the ESET Management Agent. Run the Delete Not Connecting Computers server task to remove the obsolete entry from ESET PROTECT On-Prem.

To resolve computer name conflicts (duplicate computers) between computers already present in ESET PROTECT On-Prem and those added via Active Directory synchronization, use the Static Group Synchronization server task:

In the Settings section, select Move from the Computer Creation Collision Handling drop-down menu. A new computer with the same name as another already managed computer will be moved to a subgroup.