Endpoint Protection

 View Only
Expand all | Collapse all

SEPM Clients showing Offline

Migration User

Migration UserApr 23, 2013 02:42 PM

Migration User

Migration UserApr 23, 2013 02:45 PM

Migration User

Migration UserApr 23, 2013 02:49 PM

Migration User

Migration UserApr 25, 2013 05:46 AM

Migration User

Migration UserApr 26, 2013 01:01 AM

  • 1.  SEPM Clients showing Offline

    Posted Apr 23, 2013 02:25 PM

    I am trying to connect a desktop PC to the SEPMv12 server version 12.1.2100.2093.  Servers is on that version and desktop also.

    On the server I am showing the green dot and it says it is offline.  Also I am unable to delete the pc from the server.  However on the client I see that it is receiving updates and appears to be working just fine.  How do I get it to sync with the server so both are showing correctly?  I have around 400 of these clients that are showing this.  Any help would be appreciated!!!!



  • 2.  RE: SEPM Clients showing Offline

    Posted Apr 23, 2013 02:33 PM

    If you open the GUI on the SEP client and go to Help >> Troubleshooting, what does it show under Server?

    Does it show connected to the SEPM?



  • 3.  RE: SEPM Clients showing Offline

    Posted Apr 23, 2013 02:42 PM

    It shows as connected. 

     status.jpg



  • 4.  RE: SEPM Clients showing Offline

    Posted Apr 23, 2013 02:45 PM

    And if you do a search for it in the SEPM, does it show up twice? One as offline, the other as online?



  • 5.  RE: SEPM Clients showing Offline

    Posted Apr 23, 2013 02:45 PM

    Capture.JPG



  • 6.  RE: SEPM Clients showing Offline

    Posted Apr 23, 2013 02:49 PM

    search.JPG



  • 7.  RE: SEPM Clients showing Offline

    Posted Apr 23, 2013 02:52 PM

    Interesting. The clients are connecting just not showing this in SEPM. Did you upgrade from a previous version?



  • 8.  RE: SEPM Clients showing Offline

    Posted Apr 23, 2013 02:57 PM

    Yes I upgraded the server from 12.1.671.4971 to 12.1.2100.2093.

    Now it is time to start rolling out the new version to the clients.  So as a test I am working on my own machine to see what is needed to be done.  I did the upgrade on my machine but it is still showing as offline on the server.

    Both server and desktop has been rebooted.  Also I did the upgrade to the server on 4/21.  I did my machine today on 4/23.

    The odd thing on the server is its showing I have been offline since 3/29. 



  • 9.  RE: SEPM Clients showing Offline

    Posted Apr 23, 2013 03:39 PM

    The first problem is that upgrade path is not supported. You would've needed to go to 12.1 RU2 than upgrade to 12.1 RU1 MP1. It's possible something went amiss with the database or caused a cosmetic issue.

    Upgrading or migrating to Symantec Endpoint Protection 12.1.2100 (RU2 MP1)

    Article:TECH204449  |  Created: 2013-03-28  |  Updated: 2013-04-04  |  Article URL http://www.symantec.com/docs/TECH204449

     



  • 10.  RE: SEPM Clients showing Offline

    Posted Apr 23, 2013 11:35 PM

    Hello,

    You have AD integrated network?

    If it AD integrated then you need to remove it from AD then it come delete.

    As your above mention snapshot clients are offline but that are duplicate entry.

    If there are number of entry which are same issue then you can remove it using this

    https://www-secure.symantec.com/connect/forums/duplicate-entry-server

     



  • 11.  RE: SEPM Clients showing Offline

    Posted Apr 24, 2013 01:39 AM

    client is not shwoing the green dot in console it might be having duplicate hardware id.

    right click on the OU in SEPM and try Sync. if green dot does not comes then try this document

     

    Duplicate Hardware IDs result in only one client showing up in the Symantec Endpoint Protection Manager for multiple systems



  • 12.  RE: SEPM Clients showing Offline

    Posted Apr 24, 2013 03:00 AM

    Have you tried to delete the Entry with Console Admin ID?



  • 13.  RE: SEPM Clients showing Offline

    Posted Apr 24, 2013 09:41 AM

    There are NOT any duplicates.  That is not the problem. 

    Also I did the correct upgrade path.  I had to do 2 seperate updates on this.  However I am now current.

    Problem I am having is that I can NOT get the client and the SEPM console to communicate correctly.  The client side is showing it is receiving updates.  However the SEPM console show it has not been contacted since 3/29.  Also in the console it shows that I am unable to DELETE so then maybe I can reinitiate the connection.  Also the console is NOW not deleting old pc's.  I set it to delete anything older than 7 days.. Still have not deleted anything.

    If someone could please review my screenshots above and take a look.  Also including another one here.  When I try to push an update from the console it does this.

    command status.JPG



  • 14.  RE: SEPM Clients showing Offline

    Posted Apr 24, 2013 09:44 AM

    Ok let me ask this.

    Worst case scenario I have some corruption or whatever.  I want to start over.  Machines are doing fine as they are setup.  What would the best way to go about this with creating a new database and then having the clients connect up with the new stuff.

    Appreciate all any help!!!!



  • 15.  RE: SEPM Clients showing Offline



  • 16.  RE: SEPM Clients showing Offline

    Posted Apr 24, 2013 11:38 AM

    Remove Hardware ID from one machine ie on the SEP Client and check if that reports to SEPM

    check the zip file and troubleshooting steps. Try on one SEP client only

     

    http://www.symantec.com/business/support/index?page=content&id=HOWTO54706



  • 17.  RE: SEPM Clients showing Offline

    Posted Apr 25, 2013 05:46 AM

    Hi

    What is the version of SEPM ?

    Regards

     



  • 18.  RE: SEPM Clients showing Offline

    Posted Apr 25, 2013 05:58 AM

    Did you try deleting the hardware ID what I posted in the first link? 



  • 19.  RE: SEPM Clients showing Offline

    Posted Apr 25, 2013 06:14 AM

    Per his first post

    "I am trying to connect a desktop PC to the SEPMv12 server version 12.1.2100.2093"



  • 20.  RE: SEPM Clients showing Offline

    Posted Apr 26, 2013 01:01 AM

    Hi

    Please install SEP 12.1. RU2 MP1

    Regards

     



  • 21.  RE: SEPM Clients showing Offline

    Posted Jun 17, 2013 07:53 AM

    you cant delete computer from SEPM Console if AD Integrated, so you have to remove it from AD



  • 22.  RE: SEPM Clients showing Offline

    Posted Jun 26, 2013 12:32 AM

    Hi Kaknarr,

    I had a similar problem after upgrading SEPM from v11 to v12.1

    Clients were showing up in sepm as offline, and after opening a job with symantec i was told my only option was to rebuild my sepm, an option i wasn't content with.

    After searching the web i found you can access the sepm internal db by using the dbisqlc.exe tool found in this location C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\ASA\win32

    Log in with DBA user account and select "Connect with an ODBC Data Source"

    Once connected execute the following cmd to veiw entries for any client

    SELECT * FROM SEM_CLIENT WHERE COMPUTER_NAME = '(computer name here)'

    You will probably see multiple CLIENT_ID entries for clients that are off line, to fix do the following.

    1. Stop smc service on client, then update sylink.xml file if it is not correct on client

    2. Delete all CLIENT_ID entries in db by using following cmd

    DELETE FROM SEM_CLIENT WHERE CLIENT_ID = '(client id here)'
    3. Refresh SEPM console and client should be gone
    4. Resync with AD and client should reappear
    5. Restart smc service on client
    6. Refresh the SEPM console and the client should now show as online with a green tick
     
    Hope this helps


  • 23.  RE: SEPM Clients showing Offline

    Posted Jun 26, 2013 03:24 AM

    Hi

    Please follow the following steps

    1. Delete %programfiles%\Common Files\Symantec Shared\HWID\sephwid.xml
    2. Open the registry and navigate to HKLM\Software\Symantec\Symantec Endpoint Protection\SMC\Sylink\Sylnk
    3. Edit the "HardwareID" value data to be blank
    4. Restart the Symantec Management Client (SMC) service in the services snap-in.

     

    Regards