Specifications
23
UserObjects‐GeneralPerformanceTips
EEPCcansupportthousandsofuserspergroupandpermachine.Thatsaid,forperformanceandsecurity
reasons,itisstronglyrecommendedthenumbersbekepttoaminimum;assignfeweruserstosystems
limitingtothosewhoreallyneedaccess.Forexample,anumberofsetupsfromcustomershavesome
administration/ITsupportus
ersaswellasindividualusersassignedtoclientsprovidingbettersecurityand
performance.
Ifenoughcareistakenandadequateplanningismade,performanceandsecuritycanbeincreased
considerably.Addingallusersfromlargegroupstoallsystems‐withoutbasicplanning‐isabadidea.Adding
thousa
ndsofusersispossible;however,thiswillusemorestoragespaceandcausesynchronizationeventsto
takemuchlongerbecauseeachuserischeckedforupdatesduringasynchronization.Inaddition,thiscantie
uptheObjectDirectoryserverspendingmanyextrasecondsorminutesservicingeachclient.
EEPChasex
cellentpasswordsynchronizationacrossalltheendpointclientsauserisassignedto.Itistherefore
logicalthataddingthousandsofuserstoeachmachinewilladdmanymoresynchronizationeventsacrossthe
enterprise.Thiswillputfurtherstrainonserversandnetworks.
Toeasethestrain,youcanconfiguretheresyncpro
pertiestoalessaggressivesetting(fromEndpoint
EncryptionManagerseeMachineProperties,Synctab,Automaticallyresynchronizeeveryxminutesoption).
Changetoseveralhoursratherthanthedefault60minutes,especiallyifyouhavemanyusersassigned.Setit
to240minutes(4hours)or480minutes(8hours)
,orlonger,dependingonanticipatedloadandrequirements
forsecuritypolicyupdatesorauditgathering.
Manylargedeploymentssuccessfullyuseonlythebasesynceventonbootup.Somealsousetheresync
optionsettojustlessthanaday,forexample,1200(20hours)toforceatleastonedailysync.Thiswillensure
policych
angesareapplied;itwillcatchanyunattendedsystemsorthoseuserswhodonotwishtorestart
oftenandensuretheydosupplyauditinformation.