User accounts

Usage and Config Platform
1

(imported topic written by Fredrik23)

Hi,

I was wondering how much load several accounts impact on the server/client performance?

I have ha server with 2200 clients and 21 operators at the moment. And every year i need to add/remove about 5-10 people. Consultants, new employees and such.

So how much load is it to have 5 operators vs 25 vs 50 on the server/ client?

And should i do something special when i delete a account to boost performance or clean up stuff?

Thx for any tips. // Fredrik

2

(imported comment written by BenKus)

Hi Fredrik,

There is a cost to the server when there are multiple people simultaneously logged in, but in your case it doesn’t sound like that is much of an issue…

For old operators, there is somewhat of a cost for an agent to keep checking to see if the operator has issued a new action… also if the operator had a lot of open policy actions, custom Fixlets, custom Analyses, baselines, etc., then the agent would continue to check on those. However, in all but the extreme cases, these probably don’t have a big performance impact.

I would say that it is a good practice to remove unused operator accounts for many reasons. I expect it would be a marginal performance increase, but not major.

Ben

3

(imported comment written by Fredrik23)

Ok, there are not fixlets or such bound to the other operators. so that isnt a problem.

Is it just to delete the user in BES Admin, and all his/her operator data will be deleted?

So there is no manual jobs i should run to clear out anything?

// Fredrik

4

(imported comment written by SY57_Jim_Montgomery)

The process my organization just put together to remove old accounts goes something like:

Remove access to their PVK key.

Check for any custom fixlets, tasks, baselines, groups in that user’s private site – visible or hidden, and export/import into another site.

Check for any open actions, reissue those if necessary.

Did that user have web-reports account? Reset their password, and remove any filters and private reports they had.

Finally, delete them from the administrator console.

All in all its about a 15 minute process, and it may be overkill, but I have a warm fuzzy when I’m done that there isn’t much left behind. We also run the Audit Trail Cleaner (after a SQL backup), which gets any old versions, or deleted actions, old content, etc.

http://support.bigfix.com/bes/install/downloadutility.html#besaudittrailcleaner

–Jim