7 Replies Latest reply on Feb 8, 2016 4:37 PM by Jegavelan Sargunan

Compliance Remediation Question

Jegavelan Sargunan Feb 8, 2016 11:42 AM

Hi All,

We recently upgraded from 8.3 to 8.6 BSA, after upgrade we see a difference in the remediation deployment. While in 8.3 for the compliance remediation if I want to insert a local user group we just specific it in the BL package and it always deployed it has a local group even if the local group is not present in the server.

But after upgrade if local user group is not in the server it use the TARGET.AD properties and it insert the local user group as a domain user group.

Example

8.3 remediation package value ASPNET and it insert a group call ASPNET

but

8.6 is inserting a user group has domain/ASPNET (If the user group ASPNET already existing in the server it is working fine)

How to over come this issue ?

1. Re: Compliance Remediation Question

Bill Robinson Feb 8, 2016 12:21 PM (in response to Jegavelan Sargunan)

Is this w/ the ootb content (which template?) or something you created yourself ?
Like Show 0 Likes(0)

Actions
2. Re: Compliance Remediation Question

Jegavelan Sargunan Feb 8, 2016 1:04 PM (in response to Bill Robinson)

Its default component template, below is just an example. If bladelogicrscd user is not present either as user or group in the server already this will create a user or group with domain account like

domain/bladelogicrscd
Like Show 0 Likes(0)

Actions
3. Re: Compliance Remediation Question

Bill Robinson Feb 8, 2016 1:14 PM (in response to Jegavelan Sargunan)

there's no 'default component template.

so you are saying you have a BLPackage where you are trying to add a user account to a local security policy entry. in 8.3 when you do that it adds in the account name. in 8.6 when you do this it adds in 'domain\account' to whatever setting you want to add to ? or trying to modify the local security policy is creating a new user account in the domain ?
Like Show 0 Likes(0)

Actions
4. Re: Compliance Remediation Question

Jegavelan Sargunan Feb 8, 2016 1:20 PM (in response to Bill Robinson)

in 8.6 when you do this it adds in 'domain\account' to whatever setting you want to add to?
Yes
Like Show 0 Likes(0)

Actions
5. Re: Compliance Remediation Question

Bill Robinson Feb 8, 2016 1:45 PM (in response to Jegavelan Sargunan)

i'm not seeing that. can you use .\username ?
Like Show 0 Likes(0)

Actions
6. Re: Compliance Remediation Question

Jegavelan Sargunan Feb 8, 2016 1:52 PM (in response to Bill Robinson)

We are still facing the issue, the user or group should not be present already. If it was there its working properly. I have not tried .\username so far
Like Show 0 Likes(0)

Actions
7. Re: Compliance Remediation Question

Jegavelan Sargunan Feb 8, 2016 4:37 PM (in response to Bill Robinson)

no it failed to create with .\username so it shouldnt be working for you too then
Like Show 0 Likes(0)

Actions