Affected Products:
- Dell Security Management Server
- Dell Security Management Server Virtual
- Dell Data Protection | Enterprise Edition
- Dell Data Protection | Virtual Edition
Affected Versions:
This article describes:
- Dell Security Management Server AD endpoint group requirements
- Creating an AD endpoint group
- Adding a device to an AD endpoint group
- Adding an AD endpoint group to the Dell Security Management Server
Dell Security Management Server AD Endpoint Group Requirements
- Dell Security Management Server (formerly Dell Data Protection Server) v9.7 or later
- AD endpoint group scope set to Global
- AD endpoint group type set to Security
- Within the AD endpoint group, at least one endpoint must be activated with Dell Data Security (formerly Dell Data Protection) v8.12 or later and performed a policy update to the Dell Security Management Server.
- Managed endpoints must have read access to all the Organizational Unit (OU) security groups it is a member of.
Note: Dell Security Management Server does not support nested AD groups.
- Right-click the active directory or folder within the Organization Unit (OU), select New, and then click Group.
![Create a New Group](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_1.jpeg)
- Populate the Group name, set Group Scope to Global, set Group Type to Security, and then press OK.
Note: SuperDuperAwesomeStuff is used as an example endpoint security group name.
- Right-click the desired security group and select Properties.
![Click Properties](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_3.jpeg)
- Select the Members tab and then click Add.
![Click Add](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_4.jpeg)
- Computers are not in the default object type. Click Object Types to modify search criteria.
![Click Object Types](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_5.jpeg)
- Check Computers and then press OK.
Default object types:
![Computers cleared](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_6.jpeg)
Modified:
![Computers selected](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_7.jpeg)
- Under object names, enter the desired computer name and then press Check Names. Once validated press OK
Note:
- If Check Names does not return any results, verify that Locations is properly set to the domain of the endpoints.
- 00115D009A15 is an example endpoint that is used in the screenshot.
- Click Apply to add the endpoints to the endpoint group.
- In the Dell Data Protection Server, log in to the Remote Management Console.
- In the Remote Management Console, expand Populations and then click Endpoint Groups.
![Click Endpoint Groups](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_9.jpeg)
- Under Endpoint Groups, click Add.
![Click Add](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_10.jpeg)
- Select Active Directory Group as the type of Endpoint Group.
![Select Active Directory Group](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_11.jpeg)
- Populate a Group Name, Description (optional), and AD Group name.
Note:
- Group Name = Name in which the Dell Data Protection Server references the AD endpoint group
- AD Group = AD endpoint group name
- If No Data Found was returned for the AD Group, it could be because:
- An endpoint has not been activated with a Dell Data Security product within the AD endpoint group.
- The AD Group name is incorrect.
- The AD Group scope is not set to Global.
- The AD Group type is not set to Security.
![No Data Found example for AD Group](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_13.jpeg)
Note:
- For security purposes, the OU structure is hidden from the search results. Only the AD Endpoint Group and domain is visible.
- Preview shows all managed Dell Data Security endpoints within that Endpoint Group.
- Remote Management Console only shows endpoints that Dell Data Security products manage.
- Once the endpoint group information is populated, click Add Group. Acknowledge the warning that is displayed on potential performance impact by clicking OK.
![Click Add Group](https://supportkb.dell.com/img/ka06P00000094sZQAQ/ka06P00000094sZQAQ_en_US_15.jpeg)
- Once the group has been added, expand Management, and then click Commit.
- Add a Comment detailing the change and then click Commit Policies.
Note: The AD endpoint group does not become active until Commit Policies has been selected.
To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.