I need to remove bigfix agent from the endpoints which are deleted in AD.
I know that AD info in endpoints is being updated in every 12 hours automatically. but this period is too long.
Is there another way to check if the computer is deleted on active directory ?
The time is set like this to not overwhelm the AD servers as you can imagine all of your endpoints trying to contact the server at once would be fairly catastrophic.
I can understand some policy for removing something when the computer is no longer in AD but you are also removing any remote management from the system which is a bit strange if the endpoint is still owned by your department.