Computers imported from or synchronized with Active Directory may appear in the console as belonging to a workgroup.

  • Article ID: 63223
  • Rating:
  • 2 customers rated this article 1.0 out of 6
  • Updated: 22 Mar 2010

This is a known issue in Enterprise Console version 4

When Enterprise Console discovers an unmanaged computer that belongs to a workgroup by using the Find on the network option of the Find new computers feature, the console displays the name of the computer's workgroup in the Domain/workgroup field. If the computer is then moved to an Active Directory domain and restarted, and Enterprise Console immediately synchronizes that computer with or imports it from Active Directory, the console will still display the name of the computer's workgroup in the Domain/workgroup field, and not its domain name.

What to do

You can resolve this problem by making the computer managed:

  • Protect the computer.
    The computer now has two entries in Enterprise Console: the original entry, which shows it as part of a workgroup, and a new entry, with the Domain/workgroup set to the name of the Active Directory domain.
    However, the new entry may appear in the Unassigned group, and have only the default policies applied. If this happens, you need to do as follows:
    • If the computer is not a member of a synchronized Active Directory group, move the computer to the appropriate Enterprise Console group. Delete the original workgroup entry.
    • If the computer is a member of a synchronized Active Directory group, delete the workgroup entry for that computer in Enterprise Console (the computer will be shown in the synchronized group). The next time synchronization takes place, the entry for the managed computer will appear in the correct group, with the correct policies applied. Alternatively, if you can delete the workgroup entry for the computer from Enterprise Console before the computer is found in Active Directory, the computer will appear in the correct group first time.


  • Installation of the Enterprise Console management server will fail at runtime if Microsoft networking client is not installed on the computer (although this client does not need to be active).
  • Excluding folders from on-access scanning may disable scanning on Windows 95/98 computers.
  • When you set an anti-virus policy for a group of computers, you can exclude folders from on-access scanning. This option is not supported on Windows 95/98 computers and may have the effect of disabling on-access scanning on those computers. If you move the Windows 95/98 computers to a group that does not have this option included in its policy, on-access scanning should restart.

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent