This document provides a comprehensive guide to configure Active Directory Sync - Scope of Management (SoM) policy in Endpoint Central. It covers step-by-step instructions for enabling automatic detection and addition of new computers to the SoM, setting options for deleting removed computers from Active Directory, specifying sync targets within Active Directory, and configuring notification preferences.
Navigate to Agent > Active Directory Sync > AD Sync Settings. This will open Active Directory Sync View.
Note: If IP scope for remote offices is not set, the local office agent will be installed on these new computers. This can be modified later.
Navigate to Agent > Active Directory Sync > AD Sync Settings. This will open the Active Directory Sync view.
Automatically removes computers deleted from AD from the Scope of Management during the next sync, with a notification.
Sends a notification if computers are removed from AD without deleting them from the Scope of Management.
Note: Make sure the AD Recycle Bin is enabled to remove computers from the Scope of Management that are deleted in AD.
The discovery of computers from Active Directory for a specific domain depends on the configured sync schedule for that domain. To update or change the schedule, Navigate to Agent > Domains > Select the desired domain > Modify Sync Details
Note: Only Domain or OU/Groups can be added at a time, as OUs are part of a Domain.

Configures specific email alerts to receive updates on changes and activities within the SoM, keeping administrators informed.
Navigate to Agent > Active Directory Sync > AD Sync Settings. This will open Active Directory Sync view.
Under Notification Settings,
If you do not want to install agents on specific computers that have been newly added to Active Directory, you can exclude them from agent deployment.
To view the excluded computers, go to Show and select Excluded Computers.