Add Domains and Workgroups

Last Updated On: 10 Jul 2026|

5 minutes read |

Most computer networks are based on either Windows Active Directory or Workgroups. System administrators can configure the actions to be performed by Endpoint Central when a computer is added or removed from the Active Directory. This is possible by configuring the SoM Policy. From then on, onboarding these computers onto Endpoint Central is just a click away!

This document provides everything you need to know to configure Scope of Management in Endpoint Central.

Adding Domains

Active Directory (AD) domains are typically auto-discovered, but if needed, you can add them manually. Starting from build 11.4.2522.03, we also support adding Entra ID domains.

Learn how to add a domain in Endpoint Central here.

Learn how to add Entra ID here.

If you encounter issues while adding workgroups, check our Knowledge Base for troubleshooting tips.

Note

Computers in Novell eDirectory-based networks are managed as Workgroups in Endpoint Central.

Adding Workgroups

In a workgroup setup, administrators can manually push agents to workgroup computers. This ensures that non-domain devices are brought under management for policy enforcement and software distribution.

Changing Domain or Workgroup Credentials

Endpoint Central uses credentials to sync with AD and install agents. If the password changes due to expiration or policy, the credentials must be updated.

To update credentials, go to the domain/workgroup in the console and click Modify under the Actions column. Edit the credentials and click Update Domain Details.

More info is available here.

SoM Policy — Automate Adding/Removing Computers

The SoM Policy has been reorganized into two distinct features — Active Directory Sync and Inactive Computer Policy.

Active Directory Sync automates the discovery, addition, and removal of computers by synchronizing with your Active Directory (AD), ensuring your Endpoint Central environment stays up to date with your domain.
Inactive Computer Policy identifies and removes devices that haven't reported to the Central server within a specified number of days, helping you maintain an optimized and accurate device inventory.

Learn more here.

Troubleshooting from SoM

If agent installation fails, you can use the troubleshooting option under Scope of Management:

Navigate to Endpoint Central > Agent > Scope of Management > Summary
Click Troubleshoot Now under Agent Version

Note

Note: To perform push installation of agents, either Domain Administrator privilege or Domain Admin with Local Administrator privilege is required. If these privileges are not available, you can use a Domain user account without admin access for AD sync only — agent installation from the console will not be possible in this case.