Duplicate users appear in the client policy when the Trusted Users group is synchronized with Active Directory

Technical Articles ID: KB90787
Last Modified: 2023-12-23 01:48:59 Etc/GMT

Application and Change Control (ACC) 8.x, 7.x, 6.x

Microsoft Windows - all versions

Users are duplicated in the client policy when synchronizing the Trusted Users group in ePolicy Orchestrator (ePO) with Active Directory.

Users are duplicated in the client policy because by default ACC pulls the domainName\User format and netbiosName\User (pre2k). For example:

domain = test.lab
user = user1

Policy on Client:
-t Updaters teST.LAB\user1 -u - UPN\SAM
-t Updaters teST\user1 -u - Netbios

This behavior is by design. ACC supports legacy operating systems and is needed to pull both Netbios\user and UPN\SAM accounts.

For information about how to add an installer to a policy or rule group, see the Application Control 8.1 Windows Product Guide.

This article is available in the following languages:

Knowledge Center