Falsely Reporting License Overdeployed

[Butter Muffin]

SEP 12.1 has been reporting that we have overdeployed on our license by 11.  This has been an issue since we migrated from SEP 11. In SEP 11 we never had an issue of overdeployment. We are currently within mean of our license by 2. I ran a report to find all of our computers that are still on SEP 11 and found a discovery of 30 computers reporting to be still on SEP 11. Upon further investigation i found that over half of them were already upgraded to 12.1 (Under Clients they show that they are up-to-date) but were still reporting in Reports that they has the 11 on them and some had dupicates or even triplicates. Could those be giving me the issue of Overdeployment?  

[Migration User]

Is this AD Sync ?

if yes check with duplicate entries if any in sepm example if there was any machine and no longer now the user still with ad and not removed will show in sepm as one license count and then overdeployed stauts .so any entry which is no longer in the ad remove it and wait for 24 hrs

2nd option :

Go to home tab in the top right select preferences tab go to last tab change the date format from ddmmyy to other then restart sepm service

change the preference to dd mm yy again and check

[Migration User]

AD syncing might be the issue. You may also need to look into purging your clients from the database. There are instructions on how to purge in your Implementation Guide. I have also created a video that outline those steps here:

https://www-secure.symantec.com/connect/videos/sep-121-purging-obsolete-clients-database 

Here are a couple other docs worth looking into with regards to duplicates:

Removing duplicate clients from the Symantec Endpoint Protection Manager using the CleanClients tool
http://www.symantec.com/docs/TECH97371

How to repair duplicate IDs on cloned Symantec Endpoint Protection 12.1 clients
http://www.symantec.com/docs/TECH163349

Hope that helps!

[Chetan Savade]

Hi,

Try this publick KB

SEPM is showing over deployment of clients

http://www.symantec.com/docs/TECH168121 

I hope it will help you !!!

[Butter Muffin]

We do use AD and have synced it.     I have lots of laptops and desktops that come on and off the network and they may be off the network for up to a month before they make a connection meaning that the SEPM wont see them for a month.  If i set the purge to 1 day and that deletes all the clients that havent connected in the 24 hour window. Does SEPM add the client back to the database once the Client has made its connection to the SEPM or will they have to be reinstalled? 

[Migration User]

It won't need to be reinstalled. It will just check into the SEPM and will be added back into the database. Just make sure to set the number back to a reasonable number like 30 days once you get everything ironed out.