Question: There is a setting in ePO under: Configuration > Server Settings > Endpoint Encryption > "Batch size for retrieving users" (which can be 100 - 1000 users). Is this supposed to be the batch size for the server pulling from AD, or the batch size for clients pulling from ePO? If it is the latter, it doesn't seem to be taking effect on the clients. I have it set to 500 and still only get 50 users per synch. I've tried having a script force the client to perform repeated ASCIs to pull down more than 50 users (via CmdAgent.exe which seems a bit jerry-rigged). It would be nice if there was a way to increase the default user pull per synch. I'm still used to version 5.x where it would just pull down however many users were assigned / modified all at once, which was nice and effective.
btw, I'm currently running ePO 4.6.6, McAfee Agent 126.96.36.1991, Encryption Agent 188.8.131.524, Encryption for PC 184.108.40.2064.
There's a finite size to the messages which can pass over the data channel, and if the channel times out then none of that message gets processed.
Eepc will keep requesting batches of users until it has them all, which depending on your network and epo server performance can take some time (as it does with v5).
You don't have to keep forcing it, it will handle this on its own. Maybe you have a network/data channel problem though - have you used eego to test things?
Ok, that makes sense.. I forgot to mention, this is really only a problem during the initial client installation (that's when I have the script perform multiple ASCI events). I frequently have installations where the pre-boot is enabled before all the users are pulled down and cached. It would be awesome if there was an EEPC machine policy setting that would delay enabling the pre-boot until all assigned users are pulled down and cached, since it can take a considerable amount of time depending on the ASCI setting.
Is there any way via the McAfee Communities to put in a request for an EEPC feature? I'd be great if there was an EEPC Policy / Product setting for "delay pre-boot activation until all assigned users are downloaded / cached."