cancel
Showing results for 
Search instead for 
Did you mean: 

Machine Sync times not changing

Hi,

We have a problem where we changed Machine Sync times to 210 minutes from 105, to try and improve performance.

As this did not work we reverted back to 105 minutes, however the machines local sync logs are still reporting 210 minutes, and amending the settings further has had no affect.

Can anyone help?

Thanks,

Steve
27 Replies
SafeBoot
Level 21
Report Inappropriate Content
Message 2 of 28

RE: Machine Sync times not changing

do you have any evidence of this - a client log for example?

Are you sure you changed the setting on the machines themselves (not just the group)?

RE: Machine Sync times not changing

Hi,

You'll have to forgive me if any of this sounds very basic. I've been thrust into a Safeboot Admin role without any formal training.

The Sync setting we amended is on the group. What do we do to force it to the machines?

A client log is as below:

Below is the full client log from today's actions:


02/09/2009 09:06:29 ------------------------------------------------------------------------------------------
02/09/2009 09:06:29 Starting Endpoint Encryption for PC Client Manager (v5.1.7)
02/09/2009 09:06:30 Starting remote access server on port 5556
02/09/2009 09:06:30 Delaying initial sync for 78 minutes
02/09/2009 09:06:30 Applying cryption changes
02/09/2009 10:25:03 Starting synchronization
02/09/2009 10:25:03 SbFs total space = 51573760 bytes (49.18 MB)
02/09/2009 10:25:03 SbFs free space = 32522752 bytes (31.02 MB)
02/09/2009 10:25:03 Connecting to database: "ESSCWRAPP05"
02/09/2009 10:25:03 Address=ESSCWRAPP05
02/09/2009 10:25:03 Port=5555
02/09/2009 10:25:03 Authenticate=Yes
02/09/2009 10:25:04 Checking for machine configuration updates
02/09/2009 10:25:04 Checking for user updates
02/09/2009 10:25:34 Checking for token data updates
02/09/2009 10:25:35 Updating local token data with database changes for user (ID=000010c0)
02/09/2009 10:25:35 Updating local token data with database changes for user (ID=000010c9)
02/09/2009 10:25:35 Updating local token data with database changes for user (ID=00003326)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=0000634a)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=000010e1)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00001096)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=000056fb)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=0000095e)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=000009da)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000a2a)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000a5a)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000a74)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000a76)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000aa9)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000ab7)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000ad1)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000aed)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000b16)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000b2f)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000b7b)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000b8b)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000bcf)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000be3)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000bee)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c25)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c2d)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c54)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c7b)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c8f)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000d15)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000d6e)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000d97)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000e02)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000e28)
02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000e2d)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e39)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e3c)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e48)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e5f)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e9a)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e9f)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000ebf)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000ec9)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000edf)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000f37)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000f73)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000f82)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000f89)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000faa)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000fb4)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000fe4)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000fe7)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000ffc)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=0000100f)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00001017)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00001033)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00001074)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=000010aa)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=000053b9)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00005566)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00005601)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=000056f8)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=000058c6)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00005b4b)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00006484)
02/09/2009 10:25:37 Updating local token data with database changes for user (ID=0000649c)
02/09/2009 10:25:37 Checking for SSO updates
02/09/2009 10:25:39 Updating local SSO info with database changes for user (ID=000010c9)
02/09/2009 10:25:39 Updating local SSO info with database changes for user (ID=0000095e)
02/09/2009 10:25:39 Updating local SSO info with database changes for user (ID=000009da)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000a74)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000b7b)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000b8b)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000bcf)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000be3)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000bee)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000c2d)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000c34)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000c7b)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000c8f)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000d15)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000e48)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000ec9)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000f82)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000faa)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000fe4)
02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000fe7)
02/09/2009 10:25:41 Updating local SSO info with database changes for user (ID=00001074)
02/09/2009 10:25:41 Updating local SSO info with database changes for user (ID=00005601)
02/09/2009 10:25:41 Updating local SSO info with database changes for user (ID=0000649c)
02/09/2009 10:25:41 Checking for Local Recovery updates
02/09/2009 10:25:44 Checking for hashes updates
02/09/2009 10:25:44 Transferring local audit information to database
02/09/2009 10:25:45 Checking for file updates
02/09/2009 10:25:46 Applying configuration
02/09/2009 10:25:46 Synchronization complete
02/09/2009 10:25:46 Automatically synchronizing again in 210 minute(s)
02/09/2009 10:25:46 Applying cryption changes
SafeBoot
Level 21
Report Inappropriate Content
Message 4 of 28

RE: Machine Sync times not changing

doesnt look like the config has changed for this machine - I would check the policy again.

105 mins is far too often though unless you have a really small environment - most people set the resync at 8 hours.

RE: Machine Sync times not changing

Hi,

We're running a bit of a strange setup here.

We've basically been given one server to run Safeboot across 4 domains, with at least 5 machine groups with about 1300 machines in each group.

It's also set up to allow any user to log onto any machine within a machine group. There are 5 main user groups each with an average of 2600 users.

The reason it is set up this way is due to the fact that we are supporting 5 organisations who have clubbed together to purchase this safeboot environment.

As we work in the Uk National Health Service we also need to ensure 24/7 access to the computers.

Do you have any thoughts on our setup and the possible functionality issues using this setup?

Thanks,

Steve
SafeBoot
Level 21
Report Inappropriate Content
Message 6 of 28

RE: Machine Sync times not changing

You're set up against all our recomendations for security or performance, but I guess unless someone realizes that in fact, probably only 1% of those users really use those machines, you won't be able to change anything.

Have you thought about doing an audit of who is really using which machines? You might find that enlightening.

on the plus side though, your server seems fast - I would have expected something like an Amstrad CPC in the NHS but your box seems quite capable.

I hope your passwords don't all expire on the same day - think about how much traffic that's going to create!

wink

RE: Machine Sync times not changing

Thought that might be the case.

Yeah we have considered making groups based on user business role to minimise the sync size, but as you can imagine the political overhead of getting 5 NHS organisations to agree anything is rather large lol

RE: Machine Sync times not changing

Regarding your original problem with clients not getting the new policy of 105 minutes, are they in controlled or uncontroller groups? If they're in uncontrolled groups and you made the change on the groups and not on the machine objects, the existing machines wont see the new policy - you'll need to either update the clients one by one or update the clients to the group configuration (warning though, this would reset all of their policy to that of the group - you can exclude files and users however).

RE: Machine Sync times not changing

Thanks Chris.

I'm not too sure what you mean by uncontrolled or controlled groups? Could you elaborate please?

Thanks,

Steve

RE: Machine Sync times not changing



Sure Steve,

A controlled group is one where the objects within the group do not have policy of their own. They are "controlled" by the group. Changes made to the group immediately impact the objects within the group.

An uncontrolled group means that the group is only the default policy for new objects within the group. For example, your group policy may say that only the IT Administrators group can login to a machine. When you add a new machine to the group, it will take on that policy. However, you can then open the machine object and add other users to that one machine without changing the other policies within the group.

To check, double click on one of your computers - do you have General, Encryption, Users, Warning Text, etc. as options all down the left of the computer object? If so, the group is uncontrolled - the computer is allowed to have policy of its own. If you just have General and maybe or or two other options, then the group the computer is in is controlled.