Agents management by AD security groups

Products

• Data Loss Prevention

Issue/Introduction

Some customer would like to manage agents and their agent configuration by AD security groups.

Environment

DLP All versions

Resolution

• Go to System > Agents > Agent Group and create an agent group for e.g. Test agent group (See below):

• Go to System > Agents > Agent Configuration and create an agent configuration for e.g. test_agent_config (See below):

• Assign the agent configuration to the agent group. See below:

• Click here to create agent attributes:

• Create an agent attribute with below parameters:

In the above figure, sAMAccountName=$LoggedinUser$ which means DLP agent reports Loggedin user to endpoint server thus 

• Create a new attribute for AD security group with below parameters: