Rules are not enforced on users or groups in User Assignment Group

Articles techniques ID: KB86338
Date de la dernière modification : 12/22/2021

Environnement

McAfee Data Loss Prevention (DLP) Endpoint - all supported versions

For details about supported environments, see KB68147 - Supported platforms for DLP Endpoint.

Problème

DLP Endpoint rules are not applied to users or groups when you add a user or group to a User Assignment Group using the Security Identifier (SID).

Cause

When you add a user or group to a User Assignment Group with the Security Identifier, it captures the SID from Active Directory (for example: S-1-5-21-1571949349-1272655010-724277495-1133). If a user or group is deleted and then re-created in Active Directory, a new SID is generated.

DLP does not have a mechanism to actively monitor or synchronize changes from Active Directory. As a result, the user or group is not deleted from the User Assignment Group. Also, the SID is not updated within the DLP Policy. The DLP Agent retains the SID of the original Active Directory group, which no longer matches.

Solution 1

Delete the Active Directory user or group from the User Assignment Group. To update the SID, add the user or group with the same name in the User Assignment Group.

Solution 2

Edit the existing User Assignment Groups and change the Identify LDAP Objects option from Security Identifier (SID) to Name.

Produits affectés

Data Loss Prevention Endpoint 11.6.x
Data Loss Prevention Endpoint 11.4.x (EOL)

Langues :

Cet article est disponible dans les langues suivantes :

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Glossaire des termes techniques

Mettez en surbrillance les termes du glossaire

Prenez un moment pour consulter notre Glossaire des termes techniques.

Knowledge Center

Rules are not enforced on users or groups in User Assignment Group

Environnement

Problème

Cause

Solution 1

Solution 2

Produits affectés

Langues :

Glossaire des termes techniques

Title

Title

Knowledge Center

Rules are not enforced on users or groups in User Assignment Group

Environnement

Problème

Cause

Solution 1

Solution 2

Produits affectés

Langues :

Glossaire des termes techniques

Choisissez votre région

Title

Title