Disabled Active Directory computer objects are not imported into ePolicy Orchestrator

Technical Articles ID: KB79470
Last Modified: 3/2/2022

Environment

ePolicy Orchestrator (ePO) 5.x

Problem

An Active Directory (AD) Synchronization task does not import disabled AD computer objects to the ePO System Tree.

A similar action happens if you already imported these computer objects to ePO, and you disable the objects in AD. If you configure the AD Synchronization task with the following option, the task deletes these objects from the System Tree the next time it runs:

Delete the systems from the System Tree when systems are deleted from the synchronization point

Solution

This behavior is expected.

The LDAP query ePO uses to retrieve AD computer objects was changed to ignore disabled computer objects. Because our LDAP query does not retrieve these objects, they are invisible to ePO. So, these objects are treated no differently than a non-existent or deleted computer object.

Affected Products

ePolicy Orchestrator 5.10.x
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

Disabled Active Directory computer objects are not imported into ePolicy Orchestrator

Environment

Problem

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Disabled Active Directory computer objects are not imported into ePolicy Orchestrator

Environment

Problem

Solution

Affected Products

Languages:

Choose your region

Title

Title