McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE Specifikace Strana 21

  • Stažení
  • Přidat do mých příruček
  • Tisk
  • Strana
    / 26
  • Tabulka s obsahem
  • KNIHY
  • Hodnocené. / 5. Na základě hodnocení zákazníků
Zobrazit stránku 20
21
OrphanedObjects
Tobeginacleanup,thedatabasestartswithwhatareknownas“Orphaned”objects.
TheseareobjectsthatexistintheObjectDirectory;theyarenotvisibleintheEndpointEncryptionManager
GUI.
FromtheEndpointEncryptionManagerconsole,youcanrunGroupscanfoundunderGroupsmenu.The
preferredmethodth
oughistousethecommandlinetoolastheprocesscanbeautomated.
Thesecondstepistousethecleanupcommands.Thesewilltrytofixtheobjectsordeletethemiftheycannot
befixed.Thecleanupcommandsuseacautiousapproachwhendeletingobjects,soanobjectmightnotbe
deletedeve
nifitisunusable.
InsuchascenariotheDumpMachineDesccommandshouldberedirectedtoafilesuchasDumpMachine.log
todumptheobjectsthatdonotrespondproperly.ThebrokenobjectsintheDumpMachine.logcanbedeleted
fromthedatabase.Ifthenormaldeletionproc
essdoesnotwork,useMicrosoftWindowsExplorertobrowse
totheactuallocationinthedatabaseanddeletethephysicalfolder.Note:makesureyouhaveafullbackupof
SBDATAbeforedoingthis.
RestoreCommands
Torestoreorphaneduserobjectsbackintoagroup,usethiscommand:
SBADMCL‐Command:RestoreUsers‐Adminuser:Admin‐Adminpwd:mypassword‐Group:"OrphanedUsers"‐
Database:"Customerdatabase"
Where“OrphanedUsers”isausergroupyouhavemadetoholdthem(orcanbeanothergroup).
Torestoreorphanedmachineobjectsbackintoagroup,usethiscommand:
SBA
DMCL‐Command:RestoreMachines‐Adminuser:Admin‐Adminpwd:mypassword‐Group:"Orphaned
Machines"‐Database:"Customerdatabase"
Pleasenotethatthesecommandsaredatabaseintensiveprocesses,sorunthesecommandsduringnon
workinghoursonly,or,doitpergroupduringdaytimeifthegroupsaresmall.
CleanupCommands
Thesetwoprocesseshavetobedonepergroup,socouldbedoneduringdaytimeifthegroupsaresmall.It
couldbeautomatedrunningthroughaCSVfilewithusergroups.
TocleanupcorruptedUserobjectsusethiscommand:
SBADMCL‐Command:CleanupUserGroup‐Adminuser:Admin‐Adminpwd:mypassword‐Group:”MyLaptop
Users”‐Database:"Customerdatabase"
Tocl
eanupcorruptedMachineobjectsusethiscommand:
SBADMCL‐Command:CleanupMachineGroup‐Adminuser:Admin‐Adminpwd:mypassword‐Group:”EndPoint
EncryptionMachines”‐Database:"Customerdatabase"
Zobrazit stránku 20
1 2 ... 16 17 18 19 20 21 22 23 24 25 26

Komentáře k této Příručce

Žádné komentáře