Specifications

Organizing your System Tree

Your System Tree is a very important feature of your McAfee ePO server and you can configure the

System Tree hierarchy in multiple ways.

Contents

Your System Tree

Use Active Directory synchronization

Dynamically sorting your machines

Your System Tree

Your System Tree is the structure that dictates:

• How your policies for different products are inherited

• How your client tasks are inherited

• What groups your machines go into

• What permissions your administrators have to access and change the groups in the System Tree.

If you are creating your tree for the first time, the primary options available for organizing your

systems dynamically are:

• Using Active Directory (AD) synchronization

• Dynamically sorting your machines

AD synchronization can be used with dynamic tree sorting, but ideally

try to pick one or the other. There can be some confusion and conflicts

when using both.

See McAfee ePolicy Orchestrator 4.5 Product Guide for System Tree configuration details.

Use Active Directory synchronization

Active Directory synchronization allows you to pull your systems and organizational units from your AD

structure and mirror them in ePolicy Orchestrator. This is an ideal option if your AD structure is nicely

organized for you by business unit, machine type, and others. Unfortunately, AD structure is not

always well organized.

McAfee

ePolicy Orchestrator

4.0 and 4.5 Best Practices Guide