Loading...

Knowledge Center

Duplicate users appear in client policy when Trusted Users group is synchronized with Active Directory
Technical Articles ID:   KB90787
Last Modified:  8/1/2018

Environment

McAfee Application and Change Control (MACC) 8.x, 7.x, 6.x

Microsoft Windows (All Versions)

Problem

Users are duplicated in client policy when synchronizing the Trusted Users group in ePO with Active Directory.

Cause

Users are duplicated in client policy because by default MACC pulls domainName\User format and netbiosName\User (pre2k). For example:

domain = test.lab
user = user1

Policy on Client:
-t Updaters         teST.LAB\user1 -u  - UPN\SAM
-t Updaters         teST\user1 -u - Netbios

Solution

There is no issue as this behavior is by design. MACC supports legacy operating systems and is required to pull both Netbios\user and UPN\SAM accounts.

Related Information

From PD27660 pages 26–67:
  1. On the McAfee ePO console, create or change an Application Control policy or rule group.
  2. On the Users tab, click Add.
  3. Create two rules for each user.
    • With UPN/SAM and domain account name (in domainName\user format)
    • With domain netbiosName (in netbiosName\user format)
  4. Specify a unique identification label for the user.
  • For example, if you specify John Doe's Changes as the identification label for the John Doe user, all changes made by the user are tagged with this label.
      5. Type the user name.
      6. Click OK.

When you add the user group to ADimport, MACC automatically does this for you.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.