Looking to query AD for to show all computer objects that exist that are not disabled and do not exist in Bigfix. Not sure if there is an easy way to accomplish this or not. I know I can query a certain AD group but how about and entire domain.
We do not provide inspectors to query AD generically as it can easily overwhelm an AD server to have thousands of endpoints query it…
We only provide the local computer information and users that are logged onto the endpoint.
Sorry I meant to say a session relevance query that will pull all computer objects in AD and then compare that list to a list of computers that are in bigfix to see what machines are missing for a report. Like I stated above I know I can query a certain OU but is there a way to query all OU’s to generate a list.
Sorry I meant to say a session relevance query that will pull all computer objects in AD and then compare that list to a list of computers that are in bigfix to see what machines are missing for a report. Like I stated above I know I can query a certain OU but is there a way to query all OU’s to generate a list.
Alan,
So I was wondering if I could use session relevance to run a powershell script to get all computer objects in AD (not disabled) and then compare it to what is in big fix to see what machines do not have the client installed. Is this possible to generate such a report?
if you end up finding out a clever way to do this, please update with how, I’d find that pretty useful, too. you could do this manually by exporting both and running a diff in excel or something.
we’ve just been running nmap scans against various network segments to scan for endpoints without the agent installed. I find baking the agent into your base image(s) helps a lot, too.
Yes I have been running a PS script to get all AD objects not disabled and then with in the same script checking to see if the BESClient service is installed and if not output to a file then compare that to a dump from Bigfix. I just think this is not the most robust way of handling this and would like to create a Web report that we can run and get this information. Hopefully there is a easier way…
A lot of this sounds like work that the BES Asset Discovery site is doing?