Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Way to remove orphaned machines from SGN directory?

Does anyone know a way to bulk-remove machines that haven't checked in, for example, in more then six months? We have a fair number of orphaned machines that are not in domain, so AD sync is not removing them from SGN dir in this case. I'm wondering if there's a way to do this via API or directly in SQL.

Thanks!

P.S. SGN on the server is 5.50.8.

:10707


This thread was automatically locked due to age.
Parents
  • Hi Dimitri,

    thank you very much for bringing this one up.

    There is no way to remove machines from the Management Center via SQL; however, you could use the API to remove a machien from the MC.

    This is the easy part... unfortunately there is no time stamp in 5.508 that would show you the last connection date of a client - this is planned to be available in 5.60. The only indication that you could use would be the last certificate received but that would only make sense if the last global change was less than 6 month. You could then mabye remove all machines whoms last policy received date is older than 6 month  - again all depending on your environment.

    The last policy received date is included in KBA 109925 (http://www.sophos.com/support/knowledgebase/article/109925.html)

    Regards

    Dan

    :10985
Reply
  • Hi Dimitri,

    thank you very much for bringing this one up.

    There is no way to remove machines from the Management Center via SQL; however, you could use the API to remove a machien from the MC.

    This is the easy part... unfortunately there is no time stamp in 5.508 that would show you the last connection date of a client - this is planned to be available in 5.60. The only indication that you could use would be the last certificate received but that would only make sense if the last global change was less than 6 month. You could then mabye remove all machines whoms last policy received date is older than 6 month  - again all depending on your environment.

    The last policy received date is included in KBA 109925 (http://www.sophos.com/support/knowledgebase/article/109925.html)

    Regards

    Dan

    :10985
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?