This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enterprise Console and AD sync

Hi

I am currently using SEC 5.0.0.8 and Endpoint 10.0.

In the enterprise console I can see the name of the computer however the computer description is missing.  This would be really useful in resolving issues that arise.

Is there a way that I can completely refresh the SEC computer listing to bring it in line with my current Active Directory?

Thanks in advance for any assistance.

:23969


This thread was automatically locked due to age.
  • I would definitely like to know the answer to this as well. Hopefully someone in here knows how to populate this field.

    Is the 'Computer Description' field even part of the AD aspect of SEC ?

    TIA.:smileyvery-happy:

    :23981
  • Hi,

    This much I do know... RMS on the client sends back the computer description in a status message.  Is it a case of the computer records in AD have a description but the clients locally don't?  They get imported on AD search but then overwritten with blank when reported from the client?

    If you set the computer description on a managed client and restart the Sophos Agent service, does it report correctly?

    The following may be of use:

    http://blogs.technet.com/b/heyscriptingguy/archive/2005/12/07/how-can-i-change-the-description-for-a-computer.aspx

    so, could then roll out a script set this key on the client.  Is there something in particular you're trying to set it to, the username, model number, dept, etc..?

    Also of note as it's in this area, is you can override the computer description reported by the client (you can do the same with the computer name and domain) when you install as per: http://www.sophos.com/support/knowledgebase/article/12570.html , using the -compdesc switch.  This essentially means setup.exe at install writes and the agent reads the created key:

    HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\ComputerDescriptionOverride  

    This is also true for the domain name:

    HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\DomainNameOverride

    and computer name:

    HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\ComputerNameOverride

    So you can just set these keys and restart the agent for exampl to set the computer description in SEC.  This might be useful if you wanted to override the description the client sends in to report some other piece of information in SEC.  

    Jak

    Regards,

    :23983
  • Hi Jak

    Sorry for the delayed reply I have been away from the office.

    Thanks for the info I will look into the options you have suggested and feedback the results.

    To be honest I tend not to use the local computer description because PC's can change user and location.  I find it much easier to set the description in AD and this tell me what is it and where it is located.

    Best regards

    Ian

    :24259
  • Hi, I realise this is an old thread but i came here looking for answers also. 

    I ended up finding the solution myself. 

    If you are having issues populating the Computer Description field after SAV has autoupdated please follow the following process: (note: domain admin privilege required)

    1) Log onto the remote workstation services via compmgmt.msc

    2) Start the remote registry service

    3) Connect to the workstations remote registry location:  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Parameters

    4) If the string 'srvcomment' does not exist, create it and apply the value that you wish to appear e.g "srvcomment   REG_SZ    (User Name)"

    5) Restart the Sophos Agent Service on the remote workstation

    This should auto-populate the Computer Description entry on the SUM.

    :54973