As a companion piece to the EPM vs. Active Directory, this post covers archiving PCs based on a query. You may want to do this for various reasons, such as removing devices with broken agents or removing devices that are no longer in production automatically after a certain threshold. In our example, we will build a query that finds PCs that have not performed an inventory scan and vulnerability scan within 30 days and removes them from our inventory. These would then show up on our scheduled EPM vs. Active directory report and trigger remediation steps.
Let’s get started
- Open EPM console
- Expand queries, my queries, right-click, and select ‘New Query.’
- In our example, we want to catch PCs that have not done a vulnerability scan AND and inventory in 30 days.
- Open the Tools menu, go to the data analytics sub-menu, and select ‘Data Translation Services.’
- Expand Archive Asset, select all rules, right-click, and select ‘New Rule.’
- Enter your desired rule name and description, and select next.
- You can set your linked attribute to either the serial number or the default (device id), check the ‘delete from the management suite’ option, and select ‘Finish.’
- Now it’s time to set our targets – right click your new archive rule and select ‘Set Targets.’
- Select your query we created in step two, move it over to selected devices, and select ‘OK.’
- Right-click your newly created archive rule and select ‘Schedule.’
- Define your target – in our example; it’s ‘LD01’.
- For the scheduled task, I’d recommend archiving assets daily, so your inventory stays current.
- Click ‘Save’ and your devices should be archived.