[Protect Cloud, Limit User Access to Company.]

I've recently moved across to ESET Protect Cloud which has two companies setup in it, one parent company (Company A) and a business (Company B) we recently purchased. I've successful moved all of the machines across to the new new cloud setup along with my policies, reports and tasks etc.

Whilst I will have full access to both businesses and full control of the policies etc I would like to give a colleague full access to B, but not A. I've setup a permission set for B and set the static group to company B which does limit his access to only those computers, but he will also need to be able to manage policies and installers for B which he does have Read/Write/Use access to do. But unless I move the permission set to the All static group he can't see these policies or installers, and if I do that he can also now make changes to the parent companies (A) installers and policies which I'd like to prevent.

Is there a way of setting Protect Cloud up so my colleague has full access to company B, but no access to company A or it's policies?

Thanks in advance.

[ESMC, Sync'd AD Users but not getting their OU's.]

I tried "name" originally as that was the value in v6 and it didn't work.  I've just tried it again having removed previously sync'd AD users and it has worked.

Thanks for your help.

[ESMC, Sync'd AD Users but not getting their OU's.]

I'm largely using default settings with the exception of User Extinction Handling which is set to remove, screenshot attached.  If I use the browse button next to Distinguished Name I can see and select the OU's, so ESMC can access and read the groups from AD.

[ESMC, Sync'd AD Users but not getting their OU's.]

Following a database issue with ERA v6 I've had to setup a new ESMC v7 VA server in HyperV.  The server has been successfully joined to the domain and I've created a User Sync task with a valid AD account to sync my AD details with ESMC.  Running the task I am getting my user accounts sync with ESMC but the OU's that they are situated in are not pulling across, if I look at Computer Users within ESMC I just get a folder icon and no name next to it.  A separate task to sync my computers objects and their OU's is working fine using the same credentials.

The User Sync task was setup in a similar way to v6 which works fine, so I'm not sure why it's not working as I expect on v7?

Any help appreciated.

[Eset Endpoint 6.4]

Can the installer bundle for 6.4 be deployed from a ERA5 server (perhaps as an upgrade) with configuration settings that will point to an ERA6 server?

[ERAS Sync'ing AD Every Second.]

I've setup a fresh ERAS using the Hyper-V Appliance and have created a new task to sync my computer objects within AD to the server.  I'm using a Cron Expression so that this task executes every 2 hours, but when I check the execution logs it seems to be occurring every second.  The expression is;  "* * 0/2 * * ? *" which looks correct to me.