Home » Execution Settings
Applicable For Endpoint Central MSP 
 
 

Scope of Management (SoM) Policy

The SoM policy enables IT administrators to automate the provisioning and de-provisioning of computers in Endpoint Central, offering a seamless way to manage all computers within Active Directory (AD) that aren't yet managed in Endpoint Central.

Table of contents

  1. Advantages
  2. Detect and Add Computers
  3. Delete Inactive Computers
  4. Sync Settings
  5. Notification Settings

Advantages

  • Automated Addition of New Computers: Automatically adds new AD computers to SoM with agent installation and sends a notification.
  • Inactive Computer Management: Allows actions for managing computers removed from AD or inactive for a set period.
  • Configurable Inactivity Period: Sets an inactivity threshold after which inactive computers are deleted and notifications sent.
  • Sync Frequency Customization: Supports configurable sync frequencies for Domain, SoM Policy, and Custom Group syncs.
  • Targeted Synchronization: Select specific targets (Domains, OUs, or Groups) for streamlined AD management.
  • Notification Settings: Provides updates on SoM activities, improving monitoring.

Features

Detect and Add New Computers

Automatically manages new devices added to AD by integrating them into the SoM.

  • Automated Agent Installation: Installs the agent on newly detected AD computers, bringing them under Endpoint Central management.

    • Note: If IP scope for remote offices is not configured, the local office agent will be installed by default, which can be manually modified later.

  • Email Notifications: After agent installation, Endpoint Central sends an email notification to administrators.
  • View and Manage Added Computers: Navigate to Agent > SoM Policy > View Sync Information > Show > Added Computers to monitor recent additions.

Delete Inactive Computers

This feature manages computers removed from AD or inactive for a set period to maintain an updated SoM.

  • AD-Based Removal: Detects and removes computers deleted from AD, helping keep SoM and AD environments synchronized.
  • Inactive Devices: Allows setting an inactivity threshold, removing computers that haven't contacted Endpoint Central within the specified period.

Sync Settings

Controls the sync frequency to apply consistent SoM policies across the organization.

  • Frequency Configuration: Customizes sync intervals for Domain, SoM Policy, and Custom Group syncs, helping maintain up-to-date device information.

Notification Settings

Configures specific email alerts to receive updates on changes and activities within the SoM, keeping administrators informed.

To know more about how to configure SoM Policy, refer here.