User accounts deleted from ePolicy Orchestrator remove the associated server tasks created by those accounts
Last Modified: 2022-03-01 19:42:44 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
User accounts deleted from ePolicy Orchestrator remove the associated server tasks created by those accounts
Technical Articles ID:
KB65775
Last Modified: 2022-03-01 19:42:44 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.x
Problem
When user accounts are deleted from ePO, any server tasks created by those accounts are also deleted.
Cause
In ePO, all owned objects for a user are deleted when the account is removed from the ePO server. The owned objects include server tasks because server tasks run in the permission context of the user that created them. If ePO allowed transfer of ownership for server tasks, the results of those server tasks could potentially differ. This behavior is expected. Permissions of the current owner might not match the permissions of the user who created the server task. NOTE: This article only refers to tasks that the user created. Default tasks that are created via the installation of an extension, even if owned by the deleted user, is not deleted. The ownership of the object changes to the system account. Solution
We recommend that you initially disable the logon status of an account instead of deleting it. This action allows you to make sure that all valuable information associated with the account is moved to other users before you delete the account. To submit a new product idea, go to the Enterprise Customer Product Ideas page.
Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website. For more information about product ideas, see KB60021 - How to submit a Product Idea. Affected ProductsLanguages:This article is available in the following languages: |
|