4 Replies Latest reply on Jul 17, 2015 7:42 AM by C-Wolf

    Machines removed from Active Directory OU Machine Group

    C-Wolf Rookie

      We are currently testing the Shavlik Protect 9.1 software.  We have setup machine groups based on Active Directory, however we were curious what the default behavior is for a machine that is deleted or removed from the OU?  Is the machine removed from the Machine group?  Is it removed from the console?  Does the behavior change if an Agent is installed?

       

      Thanks,

      Chris

        • 1. Re: Machines removed from Active Directory OU Machine Group
          cjensen SupportEmployee

          Hi Chris,

           

          The machines that have been removed will not continue to show up in scan results, however they will still show up within Machine View (View>Machines) if they have been scanned before. If the machine has been removed from the OU and you wish to remove it from your Protect database you may do so within Machine View by right clicking on the machine and selecting the 'Delete' option. The behavior would be the same if you were using agent. Machines that no longer exist have to be removed by hand as the Protect database will keep record of this for historical purposes.

           

          I hope this helps. Please let us know if you have any additional questions.

           

          Thanks,

          Channing

          • 2. Re: Machines removed from Active Directory OU Machine Group
            C-Wolf Rookie

            Thanks Channing,

             

            I was afraid of that.  I was hoping at the very least the software would remove the system from the Machine Group and drop in unnamed machine group (similar to the way the console handles agents that are manually installed and do not yet belong to a named machine group).

             

            So how are folks managing machines.  In a small environment this would not be hard to manage, but in a larger environment it seems like this would be a bit more difficult to manage, especially for a product that licensed on a per node basis.

             

            Thanks Again,

            Chris

            • 3. Re: Machines removed from Active Directory OU Machine Group
              cjensen SupportEmployee

              Hi Chris,

               

              Every environment is a bit different. Typically we see that people will go through and remove old machines from the Protect database through Machine View every so often. I have seen this done numerous ways but sorting the machines by the 'Latest Patch Scan Date' column makes this a bit easier so you can see which machines haven't been scanned in a while and make the determination whether or not they need to be removed fro the Protect database. The licensing shouldn't pose too big of a hurdle if the old machines haven't been deployed to within 45 days, they will release the license seat they were previously taking up. If you do see issues with licensing please reach out to us and we can suggest some further solutions.

               

              Thanks,

              Channing

              • 4. Re: Machines removed from Active Directory OU Machine Group
                C-Wolf Rookie

                Thanks again Channing.