I’m not 100% sure what you mean here. If a system is not managed (no Agent installed) the ePO doesn’t know that system exist, so a mail about that would not be possible.
Did you install any layer of a rogue system detection or a monitoring system that you can use or some AD comparison check?
We scan every day our Active Directory for new computer accounts. After that I found under 'Systems' - 'System Tree' in the 'Column' 'Managed State' 'Unmanaged' Systems.
If the epo found an 'unmanaged' system I want the get an e-mail.
Ok, thats clear..
Please try the following:
1.) Create a new Automatic Response
2.) Name it to something like "Unmanaged System"
3.) Event Group: ePO Notification Events
4.) Event type: Client
Under the Filter tab
1.) System is in Group or subgroup: "My Organization/Lost&Found
2.) Add "Agent GUID" and set it to "Value is blank"
Under the Aggregation tab
1.) Select "Trogger this response for every event"
Under Action tab
Select "Send Email" and att the values of choice
This should trigger a response for every new system that comes in to that group that is of "unmanaged" state.
Note! I didnt test this but it should work as I see it. Maybe, you have to adjust the settings under "Aggregetion" for your taste.
It don't work 😞
I configured a new Automatic Response like you told me.
After that I synchronized a test-system and it appers with the unmanaged state.
But this event don't trigger an email.
The email notification is working with other Automatic Response
You find the filter under IP-Address - Subnetmask (I have ePO 5.3.1.)
But my joy was a little bit prematurely.
Now ePO shows Clients (more than before) but they doesn't match the filte criteria. 😞