SEPM showing managed PCs as unmanaged

[Migration User]

I am currently running into an issue with SEPM that shows client PCs that are supposed to be managed but show up when I do a scan for unmanaged PCs. I have reinstalled the client and that doesn't seem to do the trick.

Also to note is that when I go to the PCs and try to import communcation settings it says that you can't do that to a managed pc. Communication seems to be intact with the SEPM server. I'm lost at this point and any help would be greatly appreciated.

Thanks

[Migration User]

Scan for unmanaged computers is not all that accurate. It would show the ip address , and names  of  different  computers. For example, it would show the  following as unmanaged computer:

 

symantecpc( 192.168.1.23), but then the  ip address and the  computer name would be of different  computers.

 

In your  case, please  verify the computer  name , and the  ip address also.

[Fatih Teke]

Hello,

When you check the client can you see green dot on right side? or you can open sep client click help and support > troubleshooting > can you see your server name or ip adress near Server ?

 

Best Regards.

Fatih

[Fatih Teke]

if you see offline there please use sylinkdrop.exe in cd2 tools. and update xml file.

if any problem we are here ;)

Best Regards.

Fatih

[Rafeeq]

delete the client from the sepm

do a update policy on the client

[Migration User]

The client PCs are showing green and are showing as updated.

if I go into endpoint client and select Help and Support>Troubleshooting under management it shows the following information

Server: <server_name>

Group: My Company/Correct End_User Group

Location: Default

Location Awareness: Enabled

Security Policy Compliance: Disabled

SNAC Status: Not Licensed

 

In response to the find unmanaged computers I verified the pc name had the correct IP on 3 of the 12 unmanaged PCs that are showing.

[Migration User]

As I said, it  is not always accurate...!

[Fatih Teke]

I wrote another post about this situation, This is not easy but good method :)

Export all clients in log tabs. Than use find unmanaged computers and copy result and paste excel. Than use vlookup formule and compare results ;)

Best Regards.

Fatih

[Migration User]

You  could use  find unmanaged detector instead....

[ch1221 2]

SEP seems to have problems determining if systems with multiple NICs are protected or not.  Or that's what it seems like in our environment.  I have been working with support on this for a while unfortunately it doesn't seem like a big enough issue to them to actually get this fixed.  I ended up turning off all of my unmanaged detectors and giving up on using this feature for the time being.  Maybe if they fix it I'll try to use it again.

[Migration User]

I guess I didn't make that very clear, my bad. I only checked 3 of the 12 because I'm sure the ip's match the names on the find unmaged computers. Not only 3 were correct, didn't check all 12.

 

Could you get me a link to that post Fatih? I'm pretty unfamiliar with SEPM as I just took this over for our company. Thanks!

[Migration User]

Hi,

 

Please see this:

https://www-secure.symantec.com/connect/forums/unmanaged-detector-usage

https://www-secure.symantec.com/connect/videos/unmanaged-detector-sepm

[Migration User]

Is Windows Firewall turned ON in  your  server?  If so, add an exception for port 8014 TCP.  .  Clients can't request policies, etc., unless you allow port 8014 on your Windows Server.

[Migration User]

Reboot your client PC ,wait for 5-10 min.Then try...

[Migration User]

Ok, none of those solutions did anything.

 

Also tried reinstalling SEPM and it didnt change anything. Could this possibly be a licensing issue? We are licensed for 50 users but only 44 are showing as managed, roughly 6(could be a couple more) are showing as "unmanaged"

[Rafeeq]

license has nothing to do anything in this case.

6 unmanaged computers; are these win7? do they have UAC enabled on them?

is sep installed on diffrent driver other than default location?

[Migration User]

For instance could a 5 user license only cover a certain number of managed PCs?

[Rafeeq]

you can install the same package to 1000 machiens; sepm wont complain about license.Symantec trusts us so lets be fair.

we need to check what is diff between these 6 machines showing as unmanaged...

whats the OS on thse machines; win7?

[Migration User]

Ok, apparently my quick count was off. It is 14 with 11 Windows 7 and 3 Windows XP. Most of them seem to be PC's that have recently been setup, however some have been in use for quite some time.

Also worth noting is that I just imaged a test machine and that showed as managed immediately, it seems to be whichever machine was last touched shows up in the client console.

Also as of recently, 20 machines or so we began using an image that is installed via a flash drive. I thought this may have been it, however a number of the PCs that are showing as unmanaged were not setup using that image and a few that always show as managed were.

[Migration User]

Bump, anyone have any other ideas on this?

[Fatih Teke]

Hi,

I send you PM and wanted pictures. can you share pictures with us?

[Migration User]

Due to company policies I will not be able to share any screen shots.

[Fatih Teke]

ok, I understand. did you want tecnical support from your sales?

 

Best Regards.

Fatih 

[Migration User]

Yea that is a possibility, I will likely contact them today.

[Migration User]

Anyone know where I can find that number?

[Migration User]

I think the route cause of the issue is you are used images with SEP which is not properly configured for imaging/re-imaging your systems.Now remove the files and reg keys as per below KB and restart it.It should be OK

Configuring Symantec Endpoint Protection client for deployment as part of a drive image

[Migration User]

Have a look at this KB also

Duplicate Hardware IDs result in only one client showing up in the Symantec Endpoint Protection Manager for two systems.

[Migration User]

AravindKM is the winner, started removing the HardwareIDs and they magically started re-appearing in the client console. Such a simple quick fix that took WAY to long to figure out. Thanks again.

[Migration User]

Happy to here your problem got solved.

Your these words made me to think in that direction"it seems to be whichever machine was last touched shows up in the client console."

[dan43]

... we cannot delete any clients out of the SEPM console.  They just won't delete.  Any options/ideas?  Our AD is sync'd with the SEPM console every 24 hours.