Duplicate users appear in client policy when Trusted Users group is synchronized with Active Directory

Technical Articles ID: KB90787
Last Modified: 5/19/2020

McAfee Application and Change Control (MACC) 8.x, 7.x, 6.x

Microsoft Windows (all versions)

Users are duplicated in client policy when synchronizing the Trusted Users group in ePolicy Orchestrator (ePO) with Active Directory.

Users are duplicated in client policy because by default MACC pulls domainName\User format and netbiosName\User (pre2k). For example:

domain = test.lab
user = user1

Policy on Client:
-t Updaters teST.LAB\user1 -u - UPN\SAM
-t Updaters teST\user1 -u - Netbios

This behavior is by design. MACC supports legacy operating systems and is needed to pull both Netbios\user and UPN\SAM accounts.

For information about how to add an installer to a policy or rule group, see the Application Control 8.1 Windows Product Guide.

Application and Change Control 8.1.x
Application and Change Control 8.0.x
Application and Change Control 7.0.x (EOL)
Application and Change Control 6.2.x

This article is available in the following languages:

Knowledge Center