Enterprise Console and AD sync

Question

Hi

I am currently using SEC 5.0.0.8 and Endpoint 10.0.

In the enterprise console I can see the name of the computer however the computer description is missing. This would be really useful in resolving issues that arise.

Is there a way that I can completely refresh the SEC computer listing to bring it in line with my current Active Directory?

Thanks in advance for any assistance.

This thread was automatically locked due to age.

jak · Accepted Answer

Hi,

This much I do know... RMS on the client sends back the computer description in a status message. Is it a case of the computer records in AD have a description but the clients locally don't? They get imported on AD search but then overwritten with blank when reported from the client?

If you set the computer description on a managed client and restart the Sophos Agent service, does it report correctly?

The following may be of use: 
 http://blogs.technet.com/b/heyscriptingguy/archive/2005/12/07/how-can-i-change-the-description-for-a-computer.aspx 
 so, could then roll out a script set this key on the client. Is there something in particular you're trying to set it to, the username, model number, dept, etc..?

Also of note as it's in this area, is you can override the computer description reported by the client (you can do the same with the computer name and domain) when you install as per: http://www.sophos.com/support/knowledgebase/article/12570.html , using the -compdesc switch. This essentially means setup.exe at install writes and the agent reads the created key:

HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\ComputerDescriptionOverride

This is also true for the domain name: 
 HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\DomainNameOverride

and computer name: 
 HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\ComputerNameOverride

So you can just set these keys and restart the agent for exampl to set the computer description in SEC. This might be useful if you wanted to override the description the client sends in to report some other piece of information in SEC.

Jak 
 Regards, :23983