McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC, Руководство по эксплуатации продукта

Страница: 143 / 328

3 Next to
Synchronization type
, select
Active Directory
. The Active Directory synchronization options appear.
4
Select the type of Active Directory synchronization you want to occur between this group and the
desired Active Directory container (and its subcontainers):
•
Systems and container structure
— Select this option if you want this group to truly reflect the Active
Directory structure. When synchronized, the System Tree structure under this group is modified
to reflect that of the Active Directory container it's mapped to. When containers are added or
removed in Active Directory, they are added or removed in the System Tree. When systems are
added, moved, or removed from Active Directory, they are added, moved, or removed from the
System Tree.
•
Systems only
— Select this option if you only want the systems from the Active Directory container
(and non-excluded subcontainers) to populate this group, and this group only. No subgroups are
created when mirroring Active Directory.
5
Select whether a duplicate entry for the system will be created for a system that already exists in
another group of the System Tree.
McAfee does not recommend selecting this option, especially if you are
only using the Active Directory synchronization as a starting point for
security management and use other System Tree management
functionality (for example, tag sorting) for further organizational
granularity below the mapping point.
6
In
Active Directory domain
you can:
• Type the fully-qualified domain name of your Active Directory domain.
• Select from a list of already registered LDAP servers.
7
Next to
Container
, click
Add
and select a source container in the
Select Active Directory Container
dialog box,
then click
OK
.
8
To exclude specific subcontainers, click
Add
next to
Exceptions
and select a subcontainer to exclude,
then click
OK
.
9
Select whether to deploy agents automatically to new systems. If you do, be sure to configure the
deployment settings.
McAfee recommends that you do not deploy the agent during the initial
import if the container is large. Deploying the 3.62 MB agent package to
many systems at once may cause network traffic issues. Instead, import
the container, then deploy the agent to groups of systems at a time,
rather than all at once. Consider revisiting this page and selecting this
option after the initial agent deployment, so that the agent is installed
automatically on new systems added to Active Directory.
10
Select whether to delete systems from the System Tree when they are deleted from the Active
Directory domain. Optionally choose whether to remove agents from the deleted systems.
Organizing the System Tree
Creating and populating groups
12
McAfee
®
ePolicy Orchestrator
®
4.6.0 Software Product Guide 143