Unneeded groups in Sophos Enterprise Console - can I delete them... without deleting anything in AD?

Question

I've just imported my Active Directory containers into the SEC.

It looks like this is designed to facilitate the creation of groups (groups are created automatically for each Active Directory OU) and then the application of Policies to those groups.

However, I notice that the wizard created groups for many Active Directory Organisational Units that do not contain computers and that never will contain computers.

This is the big question...

Can I, for clarity and concision's sake, delete the groups that I do not need?

Can I do this...

WITHOUT DELETING THE ORIGINAL OUs???

Active Directory sync is one way only, right?

By deleting unneeded groups in the Sophos Enterprise Console, there is absolutely no way I could possibly delete the OU in Active Directory, correct?

This thread was automatically locked due to age.

jak · Accepted Answer

Hi, Deleting the SEC groups will not affect the OUs in AD, it's purely a read :) If you just did an "import" rather than setting up a syncpoint, deleing the SEC groups not required will be fine.  Of course if you setup an AD sync, they will be re-created at each sync interval. Regards, Jak :33851

QC · Answer

Hello D_M, after the import you can do with the groups (and computers) as you like. Please note that a later import will of course re-create whatver you have deleted. Apart from this it is strictly one-way - there is no information written to AD. Christian :33853