I have problems when I apply policies to domain users in the Protect Cloud, the synchronization of users with the "Active Directory Scanner" was successful.
When we create a policy that blocks usb storage to a defined domain user, it does not allow selection, as shown in the image it indicates that users can only be selected with SID, but when synchronizing with the "Active Directory Scanner" tool it brings up a "Delimiters" field instead of the SID attribute, which is needed to be able to apply the rule.
Show delimiter and don't show SID
Rule
Synchronization Guide
https://help.eset.com/protect_cloud/en-US/protect_cloud_synchronize_with_ad.html
Greetings
Andres Ventura