IBM MaaS360

IBM MaaS360

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Bulk remove control

    Posted Wed March 04, 2020 01:47 PM
    Hi,
    I have around 600 devices that need to be selectively wiped and control removed from them before decommission. Is there any option for that? I've tried to do a workaround by creating a compliance rule that will remove the control when out of compliance but have issues with importing AD groups as the new created groups do not get imported to Maas360. Any help would be great

    ------------------------------
    Kamil Maciejewski
    ------------------------------


  • 2.  RE: Bulk remove control

    Posted Wed March 04, 2020 03:35 PM

    Hi Kamil,

    It would seem there are 2 issues present here, I'd like to address both if that's ok:

    1) The bulk actions we support don't currently include selective wipe or remove control due to a variety of factors/concerns - including how easy it could be to mistakenly issue those commands with no way to undo them.  So it is only currently supported as a compliance action.  I know that this is oft-requested so I'll see if anything is potentially on the roadmap.

    2) The groups not populating is concerning - Is the Cloud Extender module configured as AD or as LDAP and is the CE checking in to the portal as expected?



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 3.  RE: Bulk remove control

    Posted Thu March 05, 2020 07:57 AM
    Hi,
    As a workaround for this missing option I wanted to create a compliance rule that will do the job and just wanted to assign it to AD group and the second issue showed up ;)
    It is configured as AD and I've noticed other groups got imported in the meantime. I've tried to rename it and move to different OU but it did not changed a thing. For now I think I will be able to handle it using device group with some tricky conditions :)

    ------------------------------
    Kamil Maciejewski
    ------------------------------