Enterprise Console and AD sync

Hi,

This much I do know... RMS on the client sends back the computer description in a status message.  Is it a case of the computer records in AD have a description but the clients locally don't?  They get imported on AD search but then overwritten with blank when reported from the client?

If you set the computer description on a managed client and restart the Sophos Agent service, does it report correctly?

The following may be of use:

http://blogs.technet.com/b/heyscriptingguy/archive/2005/12/07/how-can-i-change-the-description-for-a-computer.aspx

so, could then roll out a script set this key on the client.  Is there something in particular you're trying to set it to, the username, model number, dept, etc..?

Also of note as it's in this area, is you can override the computer description reported by the client (you can do the same with the computer name and domain) when you install as per: http://www.sophos.com/support/knowledgebase/article/12570.html , using the -compdesc switch.  This essentially means setup.exe at install writes and the agent reads the created key:

HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\ComputerDescriptionOverride  

This is also true for the domain name:

HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\DomainNameOverride

and computer name:

HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\ComputerNameOverride

So you can just set these keys and restart the agent for exampl to set the computer description in SEC.  This might be useful if you wanted to override the description the client sends in to report some other piece of information in SEC.  

Jak

Regards,

Hi,

This much I do know... RMS on the client sends back the computer description in a status message.  Is it a case of the computer records in AD have a description but the clients locally don't?  They get imported on AD search but then overwritten with blank when reported from the client?

If you set the computer description on a managed client and restart the Sophos Agent service, does it report correctly?

The following may be of use:

http://blogs.technet.com/b/heyscriptingguy/archive/2005/12/07/how-can-i-change-the-description-for-a-computer.aspx

so, could then roll out a script set this key on the client.  Is there something in particular you're trying to set it to, the username, model number, dept, etc..?

Also of note as it's in this area, is you can override the computer description reported by the client (you can do the same with the computer name and domain) when you install as per: http://www.sophos.com/support/knowledgebase/article/12570.html , using the -compdesc switch.  This essentially means setup.exe at install writes and the agent reads the created key:

HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\ComputerDescriptionOverride  

This is also true for the domain name:

HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\DomainNameOverride

and computer name:

HKLM\SOFTWARE\[Wow6432Node]\Sophos\Remote Management System\ManagementAgent\ComputerNameOverride

So you can just set these keys and restart the agent for exampl to set the computer description in SEC.  This might be useful if you wanted to override the description the client sends in to report some other piece of information in SEC.  

Jak

Regards,