McAfee EPOLICY ORCHESTRATOR 4.5 Product Manual page 72

Distributing Agents to Manage Systems
Installing the McAfee Agent
3 Save the batch file you created, ePO.bat, to the
controller (PDC) server. The batch file runs from the PDC every time a system logs on to
the network.
4 Add a line to your login script that calls the batch file on your PDC server. The line would
look similar to this example:
CALL \\PDC\NETLOGON$\EPO.BAT
Each system runs the script when it logs on to the network and, if necessary, installs the
agent.
Including the agent on an image
When you include the McAfee Agent on an image, you must remove its GUID from the registry.
This allows subsequently installed agent images to generate their own GUID at their first
agent-server communication.
CAUTION: If you don't follow this step, all deployed agent images have the same GUID, and
must be changed manually. In a large organization, this is impractical. Although you can configure
the ePO server to identify replicated GUIDs and assign a new GUID at the next agent-server
communication, the action consumes considerable processing bandwidth. For information, see
Identifying and correcting a duplicate GUID .
Task
On the imaged system, locate the registry key for the agent and remove it. The registry keys
are located at:
HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent\AgentGUID
Identifying and correcting a duplicate GUID
If you deployed the agent on an image without first removing its GUID from the registry, multiple
systems in your environment will have duplicate GUIDs. When these systems fail to communicate
with the Agent Handler, they generate sequencing errors, which indicate a GUID problem. The
Managed Systems query result type tracks the following information about these errors:
• The number of sequence errors for each system in the Managed Systems Sequence Errors
property.
• The date and time of the last sequence error in the Managed Systems Last Sequence Error
property.
The tracked information is incorporated into one or the other of the available pre-defined queries:
• Systems with High Sequence Errors
• Systems with no Recent Sequence Errors
Two predefined tasks help manage GUID problems.
• Duplicate Agent GUID - remove systems with potentially duplicated GUIDs
This task deletes the systems that have a large number of sequencing errors and classifies
the agent GUID as problematic. As a result, the agent is forced to generate a new GUID.
The threshold number of sequencing errors is set in the query Systems with High Sequence
Errors.
• Duplicate Agent GUID - Clear error count
Sequencing errors can occur occasionally for inconsequential reasons. This task clears the
count of sequencing errors in systems that have not had any recent sequencing errors. This
72 McAfee ePolicy Orchestrator 4.5 Product Guide
folder of your primary domain
NETLOGON$