Best Practices For Console Housekeeping

[Migration User]

We have over 10,000 SEP clients, and are continuously replacing PC's in our enterprise at a variety of locations. In the console, we're wanting to minimize the amount of clients that are no longer in service but are showing offline (with outdated defs.). However, we are concerned about setting the "delete clients that have not connected for x days" to be too short of time, for fear of deleting SEP clients that have legitimate issues and are in need of attention (once those are deleted - out of sight, out of mind).

Any suggestions on proper housekeeping of clients in the console. Specifically, we want to minimize the rubbish (clients that no longer exist) in the console, yet ensure that we're not auto deleting SEP clients that have legit issues and need attention. Thank you!! 

[Migration User]

Sorry, no recommendations from me. I too am very interested in the answers though.

Some suggestions

• Maybe AD integration would help?
• Comparison with external tool such as Altiris / SCCM?

 

 

[ℬrίαη]

AD integration would definitely help.

Even if you set a lower number for the delete client after x days, they would check back in once they're back on the wire after being off for a long period of time if they were deleted.

[Mithun Sanghavi]

Hello,

You could make sure you have configured Email Notifications, so that you as an Administrator could take proper decision.

Secondly; In version 12.1 of the SEPM, the location for adjusting the setting to delete clients which have not connected for X number of days has moved:

1. In the SEPM, go to the Admin page.
2. Select Domains.
3. Under Tasks, select Edit Domain Properties. 
4. In the Edit Domain Properties window, on the default General tab, note the option to "Delete clients that have not connected for specified time."

Configuring a low value for this setting would clear up the duplicates more quickly. 

It is important to consider clients that are offline over the weekend. Setting this value to 1 or 2 will likely cause all your clients to be removed after a weekend.

A recommended value for large enterprise environments would be 7 to 14 days.

 

Reference: https://www-secure.symantec.com/connect/articles/duplicate-sep-clients-appear-symantec-endpoint-protection-manager-console

 

Hope that helps!!

[Migration User]

Mithun, how can we set the email notification and what is this for ?

[NRaj]

I am afraid you do no have any options. you either delete them manually or set the value for all offline machines and be okay with outdated machines going away :(

[Migration User]

Hm.. ok thanks for the info mate !