Adding Domain/Workgroup

When you install Endpoint Central MSP in your network, it automatically discovers all the domains and workgroups available in your network once you add the AD connector details.

Discovering Domains / Workgroups

To view the discovered domains/ workgroups or to initiate the discovery, select Admin tab -> Scope of Management (SoM)  -> Computers tab -> Add Computers. This will list all the computers belonging to a domain.

Adding Domains

Domain can be added in Endpoint Central in three ways:

1. From the list of computers available in the SoM --> Add Computers page select the computers that need to be managed using Endpoint Central MSP.
2. Domains can be added manually but, if for some reason, one or more domains are not discovered, you can use the Add Domain icon available in the same page to add domains manually.
3. Navigate to Admin tab -> Global Settings -> Domain -> Add Domain

Adding Workgroups

Similar to domains, workgroups can be added in three ways:

1. From the list of computers available in the SoM -> Add Computers page select the computers that need to be managed using Endpoint Central MSP.
2. Workgroups can be added manually but, if for some reason, one or more workgroups are not discovered, you can use the Add Domain icon available in the same page to add workgroups manually.
3. Navigate to Admin tab -> Global Settings -> Domain -> Add Domain

All the above options will open the Add Domain dialog for accepting the following information:

Changing the Domain or Workgroup Credentials

Endpoint Central MSP establishes a remote connection with the managed computers to perform various Desktop Management activities like agent installation / upgradation, patch/inventory scanning, and remote desktop sharing, which requires an admin credential. The credential provided when adding a domain/workgroup is used for this purpose. When the username/password provided while adding the domain/workgroup has changed later due to password expiry or other reasons, you need to update the correct credentials from the Admin tab -> Global Settings -> Domain -> to avoid getting "Access Denied" errors while performing any remote operations.

To update the credentials, choose to Modify against the corresponding domain/workgroup under Actions column. Edit the credentials and click Update Domain Details.

SoM Policy - How to add/remove computers from Endpoint Central MSP

You can automate the process of adding and removing computers that are managed by Endpoint Central MSP by configuring the SoM policy. This helps you to synchronize computers from AD Connector. So you will  find the computers that are newly added in the Active Directory, but are not managed in Endpoint Central MSP and the computers that have been deleted from the Active Directory. This helps you to quickly add or remove computers from the list of computers managed using Endpoint Central MSP.

The synchronization will happen at a specified time everyday and can be configured to notify you whenever a change is detected. You can also initiate the sync option as and when required with sync only modified data and sync all option. Sync only modified data will list only the changes that has happened after the previous sync. So the computers which are added or removed after the previous sync will be listed here. Sync all option can be used to get the complete list of all the computers that has been added or removed in the active directory.

To enable synchronization follow the steps below:

1. Select SoM -> SoM Policy tab
2. Enable the checkbox to Detect and Add New Computers
3. Specify the action that needs to be performed when a new computer is added to the Active Directory; Whether to notify me and install an agent automatically or just notify me.
4. Enable the checkbox to Delete Inactive Computers
5. Specify the action that needs to be performed when a new computer is removed from the Active Directory or it has been inactive for a long time; Whether to remove the computer from the SoM automatically and notify me or to just notify me.
6. Specify the number of days allowed for the computers to be inactive and the action to be performed.
7. Specify the notification mail message that needs to be displayed while a computer is inactive for a long time.
8. Specify the time at which the sync should happen. The time should be specified in 24 hour format and the sync will happen at the same time everyday.
9. Click Choose Domains/OUs to select the domains and OUs that you would like to sync. This will only list the domains and OUs for which the credentials have been specified.
   
   Note: If you do not see all the domains, you should check and specify the credentials first from SoM -> Computers -> Edit Credential.
10. If you wish to be notified on any change, select "Enable Email Notification" and specify the "To Address", subject and message.
11. Click Save

You can choose to exclude computers for management purpose, within UEM Central MSP. Excluding here, refers to removing the computers, which need not be managed by UEM Central MSP. You can select them, click on "Exclude Computers", button by navigating here : Web console -> SoM ->, SoM Policy -> Exclude Computers. You can view all the excluded computers, and choose to install agents anytime in the future.

Troubleshooting from SoM

From the SoM summary page, you can manually troubleshoot computers in which the agent upgrade has failed. Upon clicking the troubleshooting page, several agent versions along with the computer count will be displayed in the drop down. Depending on the version that has failed, you can choose to troubleshoot. SoM troubleshooting page will shed light on the status in Active Directory, Distribution Server status, and the agent status.