Auto-Merge Computers Configuration

The settings here allow users to choose how Computers, Domain Users and Domain Groups with duplicate ID’s are dealt with during registration and when the ‘Merge Duplicate Resources’ task is run.

In order to resolve any issues with duplicate IDs, a user must run these tasks manually.

Auto Merge Computers

The Enable merge during registration setting will determine whether new computers will be merged into one, if they share attributes with any existing computers associated with the Privilege Manager console.

If this is set to No, new computers sharing any attributes will not be merged upon registration, causing a duplicate computer to be created. If it is set to Yes, the computer will be merged upon registration, based on the settings below:

By machine SID refers to the Domain SID. If this option is set to Yes, and if it is identified that the new computer shares the same Domain SID as any existing computers during computer registration, they will be merged together. If this is set to No, new computers with a duplicate Domain SID will be merged upon registration, causing a duplicate computer to be created.

If the Merge Duplicate Resources or Merge Specific Resources tasks are run, the setting here will be used to determine whether any existing Computers on the system with duplicate Domain SIDs will be merged.

By AD account SID refers to the Account SID. If this option is set to Yes, and if it is identified that the new computer shares the same Account SID as any existing computers during computer registration, they will be merged together. If this is set to No, new computers with a duplicate Account SIDs will be merged upon registration, causing a duplicate computer to be created.

If the Merge Duplicate Resources or Merge Specific Resources tasks are run, the setting here will be used to determine whether any existing Computers, Domain Users or Domain Groups on the system with duplicate Account SIDs will be merged.

By domain\computer name refers to the Account Name (e.g., domain\computer). If this option is set to Yes, and if it is identified that the new computer shares the same Account Name as any existing computers during computer registration, they will be merged together. If this is set to No, new computers with a duplicate Account Name will be merged upon registration, causing a duplicate computer to be created.

If the Merge Duplicate Resources or Merge Specific Resources tasks are run, the setting here will be used to determine whether any existing Computers, Domain Users or Domain Groups on the system with duplicate Account Names will be merged.

By Azure AD Device Id refers to the Device ID. If this option is set to Yes, and if it is identified that the new computer shares the same Device ID as any existing computers during computer registration, they will be merged together. If this is set to No, new computers with a duplicate Device ID will be merged upon registration, causing a duplicate computer to be created.

If the Merge Duplicate Resources or Merge Specific Resources tasks are run, the setting here will be used to determine whether any existing Computers on the system with duplicate Device IDs will be merged.