[KB7819] Managing computers using Active Directory synchronization in ESET PROTECT On-Prem (Windows)

• Manage computers via Active Directory synchronization in ESET PROTECT On-Prem

1. Prerequisites
2. View unmanaged client computers in Active Directory
3. Remove client computers that are no longer available or disabled in Active Directory
4. Remove duplicate computers automatically

I. Prerequisites

• ESET PROTECT Server installed
• Network infrastructure using Active Directory

II. View unmanaged client computers in Active Directory

After the Active Directory computers are synchronized to ESET PROTECT Web Console, you can filter computers that are not managed by ESET by filtering them in a generated report.

1. Open ESET PROTECT On-Prem in your web browser and log in.

2. Select Reports → New Report Template.

3. In Basic, type the Name of the report template and select the Computers category.

4. Click Chart and select the check box under Display Table.

5. Click Data → Add Column.

6. Select Computer → Computer name. Click Add Column and select Computer → Managed computer.

7. Click Finish.

8. Find the report you have created, click the gear icon and select Generate Now.

9. You can see the unmanaged computers marked as 'no' or you can click Generate and Download and download the report as a CSV file and filter the unmanaged computers in the report.

III. Remove client computers that are no longer available or disabled in Active Directory

You have two options for removing client computers that are no longer available or are disabled in Active Directory:

1. Using the Static Group Synchronization server task: In the Settings section select Computer Extinction Handling → Remove.

   

2. Using the Delete Not Connecting Computers server task.

IV. Remove duplicate computers automatically

If there are two computers with the same name and they are both listed in the Computers section of ESET PROTECT Web Console, these duplicate records are most likely caused by the re-installation of the ESET Management Agent. Run the Delete Not Connecting Computers server task to remove the obsolete entry from ESET PROTECT Web Console.

To resolve computer name conflicts (duplicate computers) between computers already present in ESET PROTECT On-Prem and those added via Active Directory synchronization, use the Static Group Synchronization server task: In the Settings section, select Computer Creation Collision Handling → Move. A new computer with the same name as another already managed computer will be moved to a subgroup.