This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SEC and Mac OSX AD duplication

 Howdy gents,

I'mn stuck in a bit of a predicament, and wondered if anyone had some sound advice for me.  We recently migrated a lot of machines from a number of seperate consoles on our network to a single unified console (SEC 4.5.0.9).  Some of these older consoles did not support Mac machines, so i have no reference for my issue.  The guy who co-ordinated it all had no clue as far as mac's were concerned, got the windows ones working a charm and has now gone on leave, leaving me to figure out our problem.

We have a number of Mac machines that are bound to our domain.  For example, let's say the AD name is called Mac001.  in the Mac system preferences, in the sharing area, the name is set to reflects the user's name, for ease of use with Apple Remote Desktop , for example the sharing name is "My iMac".  Ok, with me so far?  In SEC, which is synchronised with the AD environment, I can see the AD name of Mac001, which is currently unmanaged.  Remove old version, I install Sophos from CID (7.2.7), and instead of picking up my AD name, it uses the sharing name.  I now have a still unmanaged mac called Mac001 and SEC has created a Mac in the unassigned folder called "My iMac".  Has anybody come across this before?  it's dirving me crazy.  We have a single mac, out of hundreds, that seems to have picked up the AD name properly (eg in AD it's called Mac002, sharing name is "Your iMac" and it only has one account in SEC in the AD container where it should be with a display name of "Your iMac").

I'm tearing my hair out.  Any ideas?  Somebody must have had this problem before.

:13781


This thread was automatically locked due to age.
Parents
  • Ben,

    Sorry about that, I did realize that I forgot to add that step as it wasn't a part of the formal directions.  Just delete both of the instances out of the Sophos Console and when the machine eventually adds itself back in it should be merged as one machine in the proper AD group. A way to speed this up might be to decrease the amount of time between AD syncs in the Enterprise Console, but we didn't really mess with that.

    Anyway, hope this works for you!

    Tim

    :16615
Reply
  • Ben,

    Sorry about that, I did realize that I forgot to add that step as it wasn't a part of the formal directions.  Just delete both of the instances out of the Sophos Console and when the machine eventually adds itself back in it should be merged as one machine in the proper AD group. A way to speed this up might be to decrease the amount of time between AD syncs in the Enterprise Console, but we didn't really mess with that.

    Anyway, hope this works for you!

    Tim

    :16615
Children
No Data