If your company uses either Active Directory or an LDAP server to manage groups, you can import the group structure into Symantec Endpoint Protection Manager. You can then manage the groups and computers from the management console.
Here are the detailed configuration steps:
1. Log into SEPM management console, select 'Admin' tab, click to edit the properties of the management server:
2. Select 'Directory Servers' tab, then click 'Add' button:
3. Input the IP address of your Active Directory Server and the user credential:
4. After click OK button, the SEPM will try to connect and add the Active Directory Server:
5. Save the added Active Directory Server:
6. From the Clients tab, select the group which you want to add the Organizational Unit and Users, then click 'Import Organization Unit or Container':
7. From the list of the 'Domain', select the AD added in previous steps:
8. The SEPM will fetch all OU information from the AD:
9. From the OU tree, select the OU the one you want to add into SEPM, it will take several seconds to add the OU and all the users under the OU:
10. After the OU and users been imported into the SEPM, you will find out all the users are showed as Offline as there are no SEP clients installed for these users:
11. Install a managed SEP client on these users' computer, then the user will showed as Online and managed: