EPO 350 w/ Active Directory Discovery

[theboyhope]

Are any of you guys using the new AD integration in EPO 3.5?

I had to move EPO to a new server so I decided to upgrade from 3.0.2 to 3.5 and give the AD integration a try.

It seems to be pretty naff.

I can only get it to map one OU per site and that can't be the domain OU. Machines removed from the AD won't be removed from the EPO directory. Machines removed from the EPO directory won't return to their proper group when rediscovered. Machines without an agent which are deleted from the EPO directory aren't EVER rediscovered. I haven't tried moving a machine to a different OU in AD and seeing if that change is reflected in the EPO directory but I won't get my hopes up.

So, *are* any of you guys using it? Have you found it to be a good feature? Any hints, tips or nudges in the right direction would be appreciated.

 

[JimmyZ1]

I tried to use it but everytime I did a discovery it would put random machine in the directory I selected. Basically I pointed it to an OU in AD and it would pull machines from a different OU and stick them in the directory I selected in EPO.... so I don't use it.

That was at the initial setup of 3.5, haven't had time to go back and do more testing

 

[TPNDK]

I have the same problem as "theboyhope"

Its a great feature to use in a huge organization but its not so great when it dosent work as you want it to...

Have anybody reported this issue to Nai?

 

[theboyhope]

Well, I've got a workaround for my issue with mapping a site to the domain-level OU:

When configuring the mapping point, browse to one of the sub-containers within the domain then remove the subgroup from the string that appears in the textbox and hit [Apply].

e.g. CN=Computers,DC=domain_name,DC=co,DC=uk becomes DC=domain_name,DC=co,DC=uk

Or you could obviously just type it in.

It will accept that and map the site to the domain.

Waiting on more info with the other issues. Some are logged as FMRs for version 3.6 but they've no idea when that'll be coming along.

 

[theboyhope]

I forgot to say: if you move a machine in AD that change won't be reflected in EPO.

Overall, it's useless. Back to the old way of doing things, eh.