Hello,
I have recently been passed the management and administration of SEC and would like some insight on how to approach the following issue:
We often reuse old computer names for new computers on the domain. E.g. when an employee leaves the company his/her computer is de-provisioned and the computer name (e.g. PC1) becomes available in the "pool". If a new employee is hired and there are computer names available in the pool, one of the old ones will be assigned to the new computer (e.g. the former PC1). From what I've seen so far, SEC registers the new computer as being the same one from before and therefore will assign all past events to the new PC1. I would like to ensure that once the computer is de-provisioned and computer name released, Sophos purges all entries regarding that computer from the database.
What is the best way to approach this?
This thread was automatically locked due to age.
