Managed Computers are not showing up in SEPM

[Migration User]

I was trying to use find an unmaged computers feature to push installation to a number of computers. After installation has finished, I can't find these computers in SEPM. I check the computers and they have Endpoint Installed and green dot which indicates that they are manged.
I also try to import OU unit from AD that contains computers. I can now see computers in the SEPM, but when I try to apply policies, it gaves me a message that communicaton with the computer can't be establish.

Any suggestion on how to remedy the cituation will be appreciated.


Serge

[Thomas K]

Can you tell us what version of SEP you are running? Did you recently upgrade? If so, from what version?

[Here2Help]

Hi,

When you login to the SEPM console it logs you into the Default SEPM domain. One possible reason why you do not see the clients in the SEPM console although they have a green dot and they are communicating with SEPM could be because you may have created multiple domains in SEPM and the existing clients are reporting into the non-default domain.
-- Log on to the SEPM console
-- Click on the Admin tab
-- Click on the Domains option
-- If you have multiple Domains then you should see the Default and domain that you have created.
-- Click on the non-default Domain and under tasks click Administer this domain
-- Click yes on the next screen.
-- Click on the Clients tab now and see if you have your groups and clients.

Let me know if this is helpful.

Thanks.

[Migration User]

I think what hear to help is saying might resolve your issue
But If that does not work then can you please let me know are you running the command on the AD group that you have imported??
And all the clients in your AD group has green dot or no?

[Migration User]

Dear All,

I recently re-installed SEPM on an XP machine after a crash, unfortunately the database was not backed up. Luckily, I was able to retrieve the old domain ID and the Keystore password. I am not at a point of restoring the clients communication with this procedure:

• Log on to the Symantec Endpoint Protection Manager Console.
• Click Admin.
• In the "System Administrator" pane, click Domains.
• Under "Tasks", click Add Domain.
• Click Advanced.

But the advance button is not showing
What other method can I use to restore clients communication.  Thanks in advance for you replies.

[Migration User]

Try the steps :

. Copy of the file Sylink.xml from the server from C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\outbox\agent\(Numbered folder)
2. On the client computer , click Start > Run, type smc -stop, and click OK.
3. Copy the Sylink.xml into the C:\Program Files\Symantec\Symantec Endpoint Protection folder, and replace any existing Sylink.xml file.
4. Click Start > Run, type smc -start, and click OK.


If  this works on one client we can use sylink replacer to re establish commuincation with all clients atomatically

[Migration User]

You Can get the old domain ID from the Old Sylink.xml file from any of the client machine. Open the XML file with workpad & try to use that Domain ID & see if that does not work then you will need to Replace the sylink.xml file as Prachand said.

[Kesavan]

hi,

you no need to go to every client to replace this xml file. sylinkreplcer.exe utility is there. you can this tool to replace the xml to all clients from your server or your system.

[Migration User]

I only have one domain (which is the domain that I want) and I don;t see task option either.

[Migration User]

You are at the older version of SEPM..where you have to do that magical trick to get the ad Domain ID box..
Better upgrade to Mr4 to higher to see that box automatically. 

[Migration User]

I am not sure if all of my clients have a green dot or not, but at least a few that I tried sure does. I verified it personally.

[Migration User]

SEPM version 11.0.3001.2224. I am not sure about upgrading since I inherit the network like that.

[Migration User]

try to get tomcat\conf\server.xml, \tomcat\etc\keystore.jks

If u can get these files u can restore the client and server comunication.


Just have to replace these files with the old ones and reconfigure the sepm

[Peterpan]

Check the filtering of client from SEPM clients tab then check if the user and comter mode are choosed. also check the display all the online client. 

[Migration User]

Hi, some of the older versions of SEPM did not have the "Advanced" button. Make sure you have an up-to-date version of SEPM. Also, if you are using an older version of SEPM, I believe (not 100% sure) the method for adding a domain with a specific ID was documented in the manual.

[Migration User]

Here is are some ideas that should help you find the 'missing' clients.

Go to one of the clients that have a green light. Open the SEP interface (You can double click on the shield icon) and click Help --> Troubleshooting.
There is an item called "Group:" This tells you what group the client is in. Also note the "Server" name, just to make sure they are not connected to some other server by mistake.
Go to that group on the SEPM server and look for the client(s). Be aware that the clients could be logged into the SEPM server using "User Mode". Mulitple clients can be logged in under one user if they are all using the same user name (The user name is the Windows login name). There is also a search function in the SEPM console that may help you find the computers.
If you need to check which domain the computer is in, you can open the Sylink.xml file on the client, located in the SEP install directory, and that will list the Domain ID. You can compare that number with the domain lists on the SEPM console.

I hope you can find those clients!

[Migration User]

Hey Ghent, I have followed your tech note as I am having the same issues..  client is managed but server (these are DC's) not showing in SEPM.

It does appear that for some odd reason this DC has decided to go into user mode!  Replacing the Sylink.xml didn't work.. and in SEPM the "Switch to computer mode" is grey..  I have even re-ran the install. 

What do I do now?
Thanks for any help!
Broken

[Migration User]

Try this

https://www-secure.symantec.com/connect/articles/troubleshooting-client-commuincation

[Migration User]

That is a good article and I am looking through it now for relevant info.. BUT my client is communicating great with SEPM, it just is in client mode!  Replacing the xml, updating policy etc dont switch it back.  If I missed something on the link I appologize I am still reading.. 

Thanks,
Broken

[Migration User]

When you say client mode do you mean User Mode? 

[Migration User]

Is there an AD sync in your SEPM ?

Also when the package was created for the first and pushed to the client what option was selected user mode or computer mode?

[Migration User]

Sorry, yes.. User Mode

Yes there is an AD sync with 7 domains..  90% sure I have never used the "User Mode" in any of my packages.

Can anyone tell me if this is included in the bugfix of the upcomming client?

Why is the "switch to computer mode" grey?  Anyone know?

[Migration User]

If the user is listed inside the Active Directory container, you cannot modify them. The structure inside the AD container can only be modified by the AD Server, and then SEPM syncs with it.
Also, even if the users are listed in the AD container, make sure the green dot is actually highlighted. Remember, any computer on the network that logs in with that username will cause the green light to show on the console -- so it may not be your computer this is logging in as a user. AD containers aren't my strong point.