Automate the removal of duplicate workstation and server objects.

[Glenn_Bolton]

Hello,

Not sure if anyone else has been able to identify a way to automate the removal of duplicate workstation and server objects. Obviously, the process would have to be able to determine which object is deleted based on date or some other criteria.

Thank you all.

[YashT · Accepted solution]

Hello @Glenn_Bolton ,

We do have an option to do that. first Do wake up agent to all the systems.

Then customize the server task to do the Job:

1. Default query "Duplicate Systems Name" > duplicate this query and click on edit.

2. when editing this query > go to filter > select filter as last communication > is not within the last 1 day> save it.

3. EPO> Menu > Server task > New > In actions select run query > query should be the one which you created > sub action > Delete systems.

As the systems are not communicating they will be deleted from EPO.

[cdinet · Accepted solution]

You can also set up a task for deleting inactive agents, but those are typically 45 day old systems.  I would suggest first try to find out why you are getting the duplicates to start with to get at the root of the problem.  There are several causes for that.  If you can't identify cause, I would suggest opening a ticket with McAfee

AD sync bringing in duplicates - kb89427

forceinstalls of the agent - kb86879

Agents in vdi mode not shut down properly - kb88533

[Glenn_Bolton]

Thank you. I will look into this. Much appreciated.

[Glenn_Bolton · Accepted solution]

Thank you YashT...I will look into this. Much appreciated.

[Glenn_Bolton]

Hello YashT,

I set this up per your notes, but I was getting inaccurate and inconstant results when I ran the query.

The default policy returned a list of duplicated objects, but no date information. I added "Last Communications"  to the list of column information and that returned a list of objects with the current date and time...not the actual date and time that is displayed in System Tree when I sort for duplicates from there.

I then appended "Last Communicated" within the actual query and that returned inconsistent information. I am puzzled by this, but I have to move on. We are re imaging a lot of laptops so a semi automated way of removing these duplicated objects would be helpful.

Thank you

Glenn

[Glenn_Bolton]

I was able to work with  a member of the Professional Services Team to configure a Scheduled Task to run on my EPO server.

This task was configured to run a SQL query under the credentials of a dedicated service account.

The account has the correct levels of access to the EPO server and the ENT SQL Database.

The query identifies duplicated server / workstation objects based on the name. It then determines which object has the older date and time stamp and then it removes it from the database.

It works great.