Computers that are deleted from Active Directory are not being deleted from the database (Symantec_CMDB) after an AD Import.
Symantec Management Platform
There can be several reasons that Directory Synchronization for the Microsoft Active Directory Import rules may not be able to delete computers from the Symantec_CMDB database after being removed from Active Directory:
If the Import Rule that the computer was imported with no longer exists, the computer will not be removed
If the computer was never imported by the Microsoft Active Directory Component, it will not be removed
If there is no data in the "Global Active Directory Details" data class for the "Path" value it will not be removed
Directory Synchronization does not remove computers that are managed; it lets Purge Maintenance take care of those computers
If the Import rule that was used to import computers has been deleted, see TECH24681 for a way to link resources to a new rule.
If there is data missing in the data class "Global Active Directory Details" data class for the "Path" value, the computers will need to be deleted manually.
Purge Maintenance will remove computers that have become managed.
The following query can be used as a report or run from SQL Management Studio directly, to see a list of the computers that will not be removed by Directory Synchronization and the reason why.
select a.Guid, a.Name, coalesce (a.[Managed State], a.[Has Associated Active AD Import Rule], a.[OU Path]) as 'Reason AD Sync will not delete' from ( select r.Guid, r.Name, [Has Associated Active AD Import Rule] = case when COUNT (i.Guid) = 0 then 'No Active Rule' else null end, case when ad.[Path] is null then 'Missing OU Path' else null end as 'OU Path', case when IsManaged = 1 then 'Managed' else null end as 'Managed State' from vRM_Computer_Item r left join Inv_Import_Rule_Imported_Items ii on ii._ResourceGuid = r.Guid left join Item i on i.Guid = ii.ImportRuleGuid left join Inv_Global_Active_Directory_Details ad on ad._ResourceGuid = r.Guid group by r.Guid, r.Name, IsManaged, ad.[Path] having COUNT (i.Guid) = 0 or IsManaged = 1 or ad.[Path] is null ) a order by 3 desc
Subscribing will provide email updates when this Article is updated. Login is required.