Notification non managed system

[Former Member]

How to ensure that the epo server sends an e-mail notification if it finds a non maneged system?

Peter

[DavHio]

Hello Peter,

I’m not 100% sure what you mean here. If a system is not managed (no Agent installed) the ePO doesn’t know that system exist, so a mail about that would not be possible.

Did you install any layer of a rogue system detection or a monitoring system that you can use or some AD comparison check?

[Former Member]

We scan every day our Active Directory for new computer accounts.  After that I found under 'Systems' -  'System Tree' in the 'Column' 'Managed State'  'Unmanaged' Systems.

If the epo found an 'unmanaged' system I want the get an e-mail. 

[DavHio]

Ok, thats clear..

Please try the following:

1.) Create a new Automatic Response

2.) Name it to something like "Unmanaged System"

3.) Event Group: ePO Notification Events

4.) Event type: Client

Under the Filter tab

1.) System is in Group or subgroup: "My Organization/Lost&Found

2.) Add "Agent GUID" and set it to "Value is blank"

Under the Aggregation tab

1.) Select "Trogger this response for every event"

Under Action tab

Select "Send Email" and att the values of choice

This should trigger a response for every new system that comes in to that group that is of "unmanaged" state.

Note! I didnt test this but it should work as I see it. Maybe, you have to adjust the settings under "Aggregetion" for your taste.

[Former Member]

It don't work 😞

I configured a new Automatic Response like you told me.
After that I synchronized a test-system and it appers with the unmanaged state.
But this event don't trigger an email.
The email notification is working with other Automatic Response

[Former Member · Accepted solution]

Now it works.

I only changed the filter to "Subnetmask" and "not equal".

[DavHio]

Great that you found the solution But where did you change the filter to Subnetmask? I dont get it really.

/D

[Former Member]

Hello Peterz,

You have selected IP Address Filters or which filter you had select for this alert as i m not able to search Subnetmask filter.

>>David

[Former Member]

You find the filter under IP-Address - Subnetmask (I have ePO 5.3.1.)

But my joy was a little bit prematurely.

Now ePO shows Clients (more than before) but they doesn't match the filte criteria. 😞

[DavHio]

Ok, that was bad new... I actually wanted to implement your idea aswell ...