1 2 3 Previous Next 27 Replies Latest reply on Sep 4, 2009 8:10 AM by SafeBoot

    Machine Sync times not changing

      Hi,

      We have a problem where we changed Machine Sync times to 210 minutes from 105, to try and improve performance.

      As this did not work we reverted back to 105 minutes, however the machines local sync logs are still reporting 210 minutes, and amending the settings further has had no affect.

      Can anyone help?

      Thanks,

      Steve
        • 1. RE: Machine Sync times not changing
          do you have any evidence of this - a client log for example?

          Are you sure you changed the setting on the machines themselves (not just the group)?
          • 2. RE: Machine Sync times not changing
            Hi,

            You'll have to forgive me if any of this sounds very basic. I've been thrust into a Safeboot Admin role without any formal training.

            The Sync setting we amended is on the group. What do we do to force it to the machines?

            A client log is as below:

            Below is the full client log from today's actions:


            02/09/2009 09:06:29 ------------------------------------------------------------------------------- -----------
            02/09/2009 09:06:29 Starting Endpoint Encryption for PC Client Manager (v5.1.7)
            02/09/2009 09:06:30 Starting remote access server on port 5556
            02/09/2009 09:06:30 Delaying initial sync for 78 minutes
            02/09/2009 09:06:30 Applying cryption changes
            02/09/2009 10:25:03 Starting synchronization
            02/09/2009 10:25:03 SbFs total space = 51573760 bytes (49.18 MB)
            02/09/2009 10:25:03 SbFs free space = 32522752 bytes (31.02 MB)
            02/09/2009 10:25:03 Connecting to database: "ESSCWRAPP05"
            02/09/2009 10:25:03 Address=ESSCWRAPP05
            02/09/2009 10:25:03 Port=5555
            02/09/2009 10:25:03 Authenticate=Yes
            02/09/2009 10:25:04 Checking for machine configuration updates
            02/09/2009 10:25:04 Checking for user updates
            02/09/2009 10:25:34 Checking for token data updates
            02/09/2009 10:25:35 Updating local token data with database changes for user (ID=000010c0)
            02/09/2009 10:25:35 Updating local token data with database changes for user (ID=000010c9)
            02/09/2009 10:25:35 Updating local token data with database changes for user (ID=00003326)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=0000634a)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=000010e1)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00001096)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=000056fb)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=0000095e)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=000009da)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000a2a)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000a5a)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000a74)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000a76)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000aa9)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000ab7)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000ad1)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000aed)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000b16)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000b2f)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000b7b)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000b8b)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000bcf)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000be3)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000bee)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c25)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c2d)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c54)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c7b)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000c8f)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000d15)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000d6e)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000d97)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000e02)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000e28)
            02/09/2009 10:25:36 Updating local token data with database changes for user (ID=00000e2d)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e39)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e3c)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e48)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e5f)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e9a)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000e9f)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000ebf)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000ec9)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000edf)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000f37)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000f73)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000f82)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000f89)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000faa)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000fb4)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000fe4)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000fe7)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00000ffc)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=0000100f)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00001017)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00001033)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00001074)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=000010aa)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=000053b9)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00005566)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00005601)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=000056f8)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=000058c6)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00005b4b)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=00006484)
            02/09/2009 10:25:37 Updating local token data with database changes for user (ID=0000649c)
            02/09/2009 10:25:37 Checking for SSO updates
            02/09/2009 10:25:39 Updating local SSO info with database changes for user (ID=000010c9)
            02/09/2009 10:25:39 Updating local SSO info with database changes for user (ID=0000095e)
            02/09/2009 10:25:39 Updating local SSO info with database changes for user (ID=000009da)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000a74)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000b7b)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000b8b)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000bcf)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000be3)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000bee)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000c2d)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000c34)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000c7b)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000c8f)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000d15)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000e48)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000ec9)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000f82)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000faa)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000fe4)
            02/09/2009 10:25:40 Updating local SSO info with database changes for user (ID=00000fe7)
            02/09/2009 10:25:41 Updating local SSO info with database changes for user (ID=00001074)
            02/09/2009 10:25:41 Updating local SSO info with database changes for user (ID=00005601)
            02/09/2009 10:25:41 Updating local SSO info with database changes for user (ID=0000649c)
            02/09/2009 10:25:41 Checking for Local Recovery updates
            02/09/2009 10:25:44 Checking for hashes updates
            02/09/2009 10:25:44 Transferring local audit information to database
            02/09/2009 10:25:45 Checking for file updates
            02/09/2009 10:25:46 Applying configuration
            02/09/2009 10:25:46 Synchronization complete
            02/09/2009 10:25:46 Automatically synchronizing again in 210 minute(s)
            02/09/2009 10:25:46 Applying cryption changes
            • 3. RE: Machine Sync times not changing
              doesnt look like the config has changed for this machine - I would check the policy again.

              105 mins is far too often though unless you have a really small environment - most people set the resync at 8 hours.
              • 4. RE: Machine Sync times not changing
                Hi,

                We're running a bit of a strange setup here.

                We've basically been given one server to run Safeboot across 4 domains, with at least 5 machine groups with about 1300 machines in each group.

                It's also set up to allow any user to log onto any machine within a machine group. There are 5 main user groups each with an average of 2600 users.

                The reason it is set up this way is due to the fact that we are supporting 5 organisations who have clubbed together to purchase this safeboot environment.

                As we work in the Uk National Health Service we also need to ensure 24/7 access to the computers.

                Do you have any thoughts on our setup and the possible functionality issues using this setup?

                Thanks,

                Steve
                • 5. RE: Machine Sync times not changing
                  You're set up against all our recomendations for security or performance, but I guess unless someone realizes that in fact, probably only 1% of those users really use those machines, you won't be able to change anything.

                  Have you thought about doing an audit of who is really using which machines? You might find that enlightening.

                  on the plus side though, your server seems fast - I would have expected something like an Amstrad CPC in the NHS but your box seems quite capable.

                  I hope your passwords don't all expire on the same day - think about how much traffic that's going to create!

                  wink
                  • 6. RE: Machine Sync times not changing
                    Thought that might be the case.

                    Yeah we have considered making groups based on user business role to minimise the sync size, but as you can imagine the political overhead of getting 5 NHS organisations to agree anything is rather large lol
                    • 7. RE: Machine Sync times not changing
                      Regarding your original problem with clients not getting the new policy of 105 minutes, are they in controlled or uncontroller groups? If they're in uncontrolled groups and you made the change on the groups and not on the machine objects, the existing machines wont see the new policy - you'll need to either update the clients one by one or update the clients to the group configuration (warning though, this would reset all of their policy to that of the group - you can exclude files and users however).
                      • 8. RE: Machine Sync times not changing
                        Thanks Chris.

                        I'm not too sure what you mean by uncontrolled or controlled groups? Could you elaborate please?

                        Thanks,

                        Steve
                        • 9. RE: Machine Sync times not changing


                          Sure Steve,

                          A controlled group is one where the objects within the group do not have policy of their own. They are "controlled" by the group. Changes made to the group immediately impact the objects within the group.

                          An uncontrolled group means that the group is only the default policy for new objects within the group. For example, your group policy may say that only the IT Administrators group can login to a machine. When you add a new machine to the group, it will take on that policy. However, you can then open the machine object and add other users to that one machine without changing the other policies within the group.

                          To check, double click on one of your computers - do you have General, Encryption, Users, Warning Text, etc. as options all down the left of the computer object? If so, the group is uncontrolled - the computer is allowed to have policy of its own. If you just have General and maybe or or two other options, then the group the computer is in is controlled.
                          1 2 3 Previous Next