topic Re: Organisation Scanner on 81.20 with client 88.41 without AzureAD in Endpoint

Organisation Scanner on 81.20 with client 88.41 without AzureAD

Sven — Mon, 22 Jul 2024 13:45:07 GMT

Hi ,

we have a hybrid AD with Azure. When the organisation scanner on EPS server scan the internal AD the some users are assigned on the EPS at Entire Organisation / Other Users/Computers and the client preboot shows the domain AZUREAD.

This is stupid, because it enters the "wrong" user in the preboot of the FDE which means that you have to change the user in the preboot to the correct user.

Why there is the problem ?

And how can I disable the AzureAD synchronisation and only use the internal AD synchronisation ?

Thx.

Sven

Re: Organisation Scanner on 81.20 with client 88.41 without AzureAD

Sven — Mon, 22 Jul 2024 15:07:07 GMT

Hi again,

we were able to narrow down the problem a little. I have found that the deleted users/computers was not correctly synchronised with the AD altough the serviceaccount has full read permissions on AD.

Is it posible to clean up the Checkpoint EPS database ?

Sven

Re: Organisation Scanner on 81.20 with client 88.41 without AzureAD

Itamar_Tubul — Mon, 22 Jul 2024 15:11:43 GMT

Hi,

We apologize for the inconvenience.

We are aware of an issue with the FDE blade when using EntraID. We will update our documentation and known limitations to reflect this issue.

We are actively working on a solution that will be deployed in the next few weeks.

In the meantime, if you need to remove EntraID from your server, please open a support request, and we will assist you with the process.

Thank you for your understanding and patience.

Best regards,

Itamar

Re: Organisation Scanner on 81.20 with client 88.41 without AzureAD

FloydG — Thu, 15 Aug 2024 07:29:44 GMT

Hi. Has this issue been fixed in "Enterprise Endpoint Security E88.50 Windows Clients"?

Not sure if this matches our issue:

EPS-56482

Enhancement: After a password change, Microsoft Entra ID users are now prompted to lock and unlock the computer to synchronize the Windows password and the FDE Pre-boot password.