Active Directory & duplicate systems

[Marvin]

Hi,

Using ePO 5.9.1 and McAfee Agent 5.7.1 (pending upgrade to 5.7.2).

Until a few years back, we didn't have an AD. Now we do, but not all of our systems are in the AD yet. So my System Tree is still a mix of AD and not AD. All the machines that are in the AD are in a group (& subgroups) called AD, all the others are sorted according to the UID and IP addresses.

I have a problem with some Systems/Agents that seem to "lose" the information that they belong to the AD -- or, for some Agents, ePO seems to lost this information.

So these systems now appear twice in my System Tree. Once under the AD (non-compliant and last communication is "a while ago") and once in the "old" system tree, where they are compliant.  This messes up my compliance reports and statistics and is a mess.

How can I "explain" to ePO that what it believes are two separate machines are one and the same... ?

I've tried deleting one system, or the other, or both... The AD (out-of-sync) machine comes back through the AD sync and the other machine come back after ASCI.  And I have no control over the AD, so I cannot delete the systems from it - and that would not be an acceptable solution.

Thank you for any help

 M.

[cdinet]

Go through the following KB's and make sure you aren't running any forceinstalls of the agent.  

KB93591, KB86879 and if those don't resolve, open a ticket with McAfee with the data requested in KB93285.

[cdinet]

Additionally, how is the sync set up?  Are you bringing them in via ad structure or flat list and moving systems to sync group vs leaving them where they are?  Is the sync only set up at one group where your non-ad systems don't reside?