AD Sync Tool - LDAP

The main question is if your computers are controlled by Microsoft's Active Directory - if they are then you are good to go. LDAP is one of the ways used to query AD for its data which is what the tool does. In essence, you point it a the Domain Controller (or one of them if you have multiple) and tell it what OUs to read from and it populates a list of entries for the machines to migrate.

If you are using local workgroups, however, you won't be able to do that because you won't have a central repository of knowledge.

Please clarify if you are using AD or not in your environment.

Here is the articles that can help you in this:

https://community.sophos.com/kb/en-us/122264

Thanks for the reply. Yes, we are using AD in our environment, I have already installed LDAP on one of our domain controllers, but I have no idea how to configure it ready for use with the Sophos AD Sync tool.

Thanks

Hi,

Here is the article you can refer how to install AD sync and see what are the LDAP filters used to find the users and groups,

https://community.sophos.com/kb/en-us/121854

Appreciated, thank you, it seems I was overthinking this to be honest, a lot of what i was doing was not needed. Most of the issues I was having were on my end.

I noticed that the AD Sync tool only allows you to import users but not PCs. Is there a way to import all PCs in our environment into Central? This would be good because it would then allow us to see any PCs that may not have had the endpoint protection installed.

Thanks.

Appreciated, thank you, it seems I was overthinking this to be honest, a lot of what i was doing was not needed. Most of the issues I was having were on my end.

I noticed that the AD Sync tool only allows you to import users but not PCs. Is there a way to import all PCs in our environment into Central? This would be good because it would then allow us to see any PCs that may not have had the endpoint protection installed.

Thanks.

Hi

AD sync is for users and groups.

Sophos Central AD Sync utility will import the following objects from the Active Directory:

• Username
• Login
• Email address
• Groups and the members of each group

Note: Only groups with more than one member will be created.

Whenever an endpoint agent is installed on a computer it will automatically get added to the Sophos central dashboard. There is no option to bing all the endpoints on the network to Central dashboard. You can send a setup email link to install it on every user`s endpoints via Sophos central dashboard.

Thank you for this. 

Our environment is an enterprise environment. we are currently running Sophos Enterprise (Console version 5.5.1) and it is all on premise.

Finally, I am looking for the best way to migrate all these PCs from the on premise enterprise version of Sophos endpoint, over to the endpoint on Central.

Any advice on this is appreciated. I looked at some of the KB's but they either seem to not work or to be outdated. 

Hi David, 

For Enterprise Console to Central migration, we do have a Migration Tool that can be used.

Please review the following Portal with links to general information, documentation, and downloads. 

Please let us know if you have any further questions. 

Regards,