Return
-
Title
Discovery Importing Duplicates of Manually Created Assets -
Description
Scheduled asset discovery jobs and identifying and importing Assets that have already been manually added to Safeguard, which is causing conflicts and management failures. -
Cause
When a Safeguard Asset is added by Directory Asset Discovery, the asset is created with DirectoryProperties, which includes information to associate the Asset with its parent Directory. Details on DirectoryProperties can be found by viewing the Assets/ API Documentation at https://<appliance_addr>/service/core/swagger.
The next time Safeguard executes Directory Asset Discovery, Safeguard identifies that an Active Directory Computer has already been added to Safeguard by evaluating the DirectoryProperties on the existing Asset.
If an asset that exists in AD as a Computer is added manually, or by script, without DirectoryProperties, and a Directory Asset Discovery Job discovers the Computer, Safeguard will not recognize that the discovered Computer has already been added as an Asset and will create a new Asset. -
Resolution
To prevent this from happening, manually added Assets should be edited by API and given DirectoryProperties. This will prevent re-adding of the Asset. This can be accomplished using the Safefguard PowerShell extension:
$manualAsset = Get-SafeguardAsset -AssetToGet [id or name]
$manualAsset.DirectoryProperties = @{DomainName=“your.domain.com”}
Edit-SafeguardAsset -AssetObject $manualAsset
If multiple “duplicate” assets have been already been added, the following would be more appropriate:
$manualAsset = Get-SafeguardAsset -AssetToGet [id or name]
$dirAsset = Get-SafeguardAsset -AssetToGet [id or name]
$dirprop = $dirAsset.DirectoryProperties
$manualAsset.DirectoryProperties = $dirprop
Edit-SafeguardAsset -AssetObject $manualAsset
Remove-SafeguardAsset -AssetToDelete $dirAsset.Id