Client Management Suite

Hi There

I was hoping if someone could explain something for me in relation to the Default Organizational Group. I understand that this group and its hierachy is created by default and resource types added into their respective containers.

My question is, are the resources (in particular computers) removed whenever the asset is removed from th CMDB? For example our Active Directory Organizational Group is kept in sync as computer resources are removed from AD or whenever Auto purging rules for non-active computer resources take place. But these items removed still appear in the default Computer container within the Default Organizational Group. I have to manually delete it from there.

Is this normal? Or should the computer assets be removed automatically as they do in my Active Directory Organizational Group?

Many Thanks

David

If I understand right, you have Altiris synchronized with ActiveDirectory, and when you retire a computer, you remove it from AD and turn it off.  When Altiris synchronizes with AD, you want the computer removed from Altiris as a managed system.

Directory synchronization doesn't remove computers from Altiris when they are removed from AD.  Instead, purge maintenance handles this.  What are your purge settings?

Yes AD is synchronised with CMS.

Our Purge Settings are set to purge managed computers that have not reported data for 30 days and the option to Delete the computers and all associated data from the database.

To be deleted using purge settings, they must be 1) Managed 2) Active 3) not reporting data for 30 days (since your setting is 30 days).

If you look at some of the resources that you expected to be deleted, do they meet all three criteria?

Any update on this?

"Directory synchronization doesn't remove computers from Altiris when they are removed from AD.  Instead, purge maintenance handles this. "

Are you sure about this? The Directory synchronization schedule specifically states "This schedule will delete any imported items and resources that no longer exist in Microsoft Active Directory".

You can see that text on the AD import page.

This synch schedule is not enabled by default.

As far as i know AD Sync will indeed remove computers from the CMDB if they got deleted from AD.

BUT they only get deleted when they where initialy imported from an AD import rule. If they were discovered before, they will not become deleted.

You are right, Mistral.

At least in NS 6.0, the AD syncronization only works for managed computers that were discovered by a valid import rule.

If the machine was discovered by any other mean, or is unmanaged, or the import rule does not exist, it will not be deleted when AD sync runs.