Overview

There are two ways in which you can use the Active Directory (AD) in Trellix ePO - SaaS:

1. Pull in the structure of the AD from the customer's domain, including the Organizational Units and Computers contained in that structure.
2. Use AD user data for applying user-based policy assignment, and user data with Organizational Units, Security Groups, and Users.

ADC:

This component is deployed from Trellix ePO - SaaS, which connects to the customer's AD and uploads the user and system data to sync with ePO.

ADC-supported operating system:

• Server operating system: Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019
• Client operating system: Windows 8.1 and Windows 10

How to deploy the ADC to the end node:

1. Log on to Trellix ePO - SaaS.
2. Open the Product Deployment page under the software category.
3. Scroll down to the bottom and click Advanced Product Deployment.
4. Click the New deployment option and name the task.
5. In the left pane, from the software tab, click the drop-down and select the ADC package.
6. Select the system to deploy this package and schedule the client task to get the ADC to deploy on the end node.

NOTE: Once the product is deployed and reports to Trellix ePO - SaaS, you see that the system is installed with ADC and an ADC System tag is applied automatically.

How to register the AD with Trellix ePO - SaaS:

1. Log on to Trellix ePO - SaaS.
2. Under the Configuration page, click Directory Service.
3. Type the Domain Name.
4. Select the system to deploy the ADC.
5. Type the AD credentials and perform the Test Connection.
6. Save the changes.

NOTE: If the system is installed with ADC, the Connectors Category page displays the status as installed. We can select another system from this page to deploy ADC to the end node. It's recommended to have a maximum of two systems, and these systems must be installed with Trellix Agent (TA) and Data Exchange Layer (DXL) Client and must report to Trellix ePO - SaaS.



Active Directory Connector Service:

Background details:

• Service Name: McAfee Active Directory Connector Service
• Process name: ad_connector.exe
• Process path: C:\program files\mcafee\ad_connector\ad_connector.exe
• Log name: adc.log
• Log path: C:\ProgramData\McAfee\AD_Connector\logs\adc.log   

To enable debug logging in ADC:

1. Log on to Trellix ePO - SaaS.
2. Click Policy Catalog and select ADC.
3. Select the policy and click Edit.
4. In the left pane, from the Detailed logging tab, click Enable.
5. Set the log file size and number of log file count.

NOTE: Apply this policy to the system after installation of ADC and send the wakeup call to update the policy.