How to Add an Active Directory Endpoint Group in the Dell Security Management Server

Affected Products:

• Dell Security Management Server
• Dell Security Management Server Virtual
• Dell Data Protection | Enterprise Edition
• Dell Data Protection | Virtual Edition

Affected Versions:

• v9.7 and Later

This article describes:

• Dell Security Management Server AD endpoint group requirements
• Creating an AD endpoint group
• Adding a device to an AD endpoint group
• Adding an AD endpoint group to the Dell Security Management Server

Dell Security Management Server AD Endpoint Group Requirements

• Dell Security Management Server (formerly Dell Data Protection Server) v9.7 or later
• AD endpoint group scope set to Global
• AD endpoint group type set to Security
• Within the AD endpoint group, at least one endpoint must be activated with Dell Data Security (formerly Dell Data Protection) v8.12 or later and performed a policy update to the Dell Security Management Server.
• Managed endpoints must have read access to all the Organizational Unit (OU) security groups it is a member of.

How to Create an Endpoint Group in AD

1. Right-click the active directory or folder within the Organization Unit (OU), select New, and then click Group.
   
2. Populate the Group name, set Group Scope to Global, set Group Type to Security, and then press OK.
   
   Note: SuperDuperAwesomeStuff is used as an example endpoint security group name.

How to Add an Endpoint to an AD Endpoint Security Group

1. Right-click the desired security group and select Properties.
   
2. Select the Members tab and then click Add.
   
3. Computers are not in the default object type. Click Object Types to modify search criteria.
   
4. Check Computers and then press OK.
   Default object types:
   
   Modified:
   
5. Under object names, enter the desired computer name and then press Check Names. Once validated press OK
   
   Note:

   • If Check Names does not return any results, verify that Locations is properly set to the domain of the endpoints.
   • 00115D009A15 is an example endpoint that is used in the screenshot.
6. Click Apply to add the endpoints to the endpoint group.

How to Add an AD Endpoint Group to Dell Data Protection Server

1. In the Dell Data Protection Server, log in to the Remote Management Console.
2. In the Remote Management Console, expand Populations and then click Endpoint Groups.
   
3. Under Endpoint Groups, click Add.
   
4. Select Active Directory Group as the type of Endpoint Group.
   
5. Populate a Group Name, Description (optional), and AD Group name.
   
   Note:

   • Group Name = Name in which the Dell Data Protection Server references the AD endpoint group
   • AD Group = AD endpoint group name
   • If No Data Found was returned for the AD Group, it could be because:
     • An endpoint has not been activated with a Dell Data Security product within the AD endpoint group.
     • The AD Group name is incorrect.
     • The AD Group scope is not set to Global.
     • The AD Group type is not set to Security.
       
       
       Note:

       • For security purposes, the OU structure is hidden from the search results. Only the AD Endpoint Group and domain is visible.
       • Preview shows all managed Dell Data Security endpoints within that Endpoint Group.
       • Remote Management Console only shows endpoints that Dell Data Security products manage.
6. Once the endpoint group information is populated, click Add Group. Acknowledge the warning that is displayed on potential performance impact by clicking OK.
   
7. Once the group has been added, expand Management, and then click Commit.
8. Add a Comment detailing the change and then click Commit Policies.
   
   Note: The AD endpoint group does not become active until Commit Policies has been selected.